diff --git a/.github/workflows/codeql-actions.yaml b/.github/workflows/codeql-actions.yaml
index c0709c1..295c019 100644
--- a/.github/workflows/codeql-actions.yaml
+++ b/.github/workflows/codeql-actions.yaml
@@ -62,7 +62,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           languages: actions
           build-mode: none
@@ -70,6 +70,6 @@ jobs:
           config-file: ${{ inputs.config-file }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           category: "/language:actions"
diff --git a/.github/workflows/codeql-go.yaml b/.github/workflows/codeql-go.yaml
index 96d1a3f..3f299b0 100644
--- a/.github/workflows/codeql-go.yaml
+++ b/.github/workflows/codeql-go.yaml
@@ -101,7 +101,7 @@ jobs:
 
       - name: Initialize CodeQL
         if: steps.detect.outputs.found == 'true'
-        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           languages: go
           build-mode: manual
@@ -129,6 +129,6 @@ jobs:
 
       - name: Perform CodeQL Analysis
         if: steps.detect.outputs.found == 'true'
-        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           category: "/language:go"
diff --git a/.github/workflows/codeql-javascript.yaml b/.github/workflows/codeql-javascript.yaml
index 3115476..6a2c2a3 100644
--- a/.github/workflows/codeql-javascript.yaml
+++ b/.github/workflows/codeql-javascript.yaml
@@ -63,7 +63,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           # `javascript-typescript` covers both .js and .ts in one extractor.
           languages: javascript-typescript
@@ -72,6 +72,6 @@ jobs:
           config-file: ${{ inputs.config-file }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           category: "/language:javascript-typescript"
diff --git a/.github/workflows/codeql-python.yaml b/.github/workflows/codeql-python.yaml
index fed6718..1f1daea 100644
--- a/.github/workflows/codeql-python.yaml
+++ b/.github/workflows/codeql-python.yaml
@@ -61,7 +61,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           languages: python
           build-mode: none
@@ -69,6 +69,6 @@ jobs:
           config-file: ${{ inputs.config-file }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           category: "/language:python"