diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 7c5783a..4ef0641 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -29,7 +29,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
+        uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
         with:
           languages: python
           queries: security-and-quality
@@ -37,7 +37,7 @@ jobs:
           build-mode: none
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
+        uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
         with:
           category: "/language:python"
 
@@ -60,7 +60,7 @@ jobs:
           toolchain: stable
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
+        uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
         with:
           languages: rust
           queries: security-and-quality
@@ -71,6 +71,6 @@ jobs:
         run: cargo build --features extension-module
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
+        uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
         with:
           category: "/language:rust"
diff --git a/.github/workflows/nightly-hardening.yml b/.github/workflows/nightly-hardening.yml
index 6be92f7..cf031fe 100644
--- a/.github/workflows/nightly-hardening.yml
+++ b/.github/workflows/nightly-hardening.yml
@@ -342,7 +342,7 @@ jobs:
         with:
           toolchain: stable
       - name: Install cargo-mutants
-        uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2
+        uses: taiki-e/install-action@6cd13508893c0e7eab5f273c2575d3859bd7229a # v2
         with:
           tool: cargo-mutants
       - name: Run mutation testing shard
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0a01a87..994171b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -122,7 +122,7 @@ jobs:
           fi
 
       - name: Install git-cliff
-        uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2
+        uses: taiki-e/install-action@6cd13508893c0e7eab5f273c2575d3859bd7229a # v2
         with:
           tool: git-cliff@2