diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ea2d6300d..03108c5aa 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -45,12 +45,12 @@ jobs:
         distribution: 'temurin'
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4.37.6
+      uses: github/codeql-action/init@v4.37.9
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4.37.6
+      uses: github/codeql-action/analyze@v4.37.9
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/snyk-security.yml b/.github/workflows/snyk-security.yml
index 880164697..18d1be346 100644
--- a/.github/workflows/snyk-security.yml
+++ b/.github/workflows/snyk-security.yml
@@ -29,6 +29,6 @@ jobs:
           
         # Push the Snyk Code results into GitHub Code Scanning tab
       - name: Upload result to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@v4.37.6
+        uses: github/codeql-action/upload-sarif@v4.37.9
         with:
           sarif_file: snyk.sarif
diff --git a/.github/workflows/trivy_scan.yml b/.github/workflows/trivy_scan.yml
index 3691d8966..6c753a0e3 100644
--- a/.github/workflows/trivy_scan.yml
+++ b/.github/workflows/trivy_scan.yml
@@ -29,7 +29,7 @@ jobs:
           output: 'trivy-results.sarif'
           severity: 'CRITICAL'
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v4.37.6
+        uses: github/codeql-action/upload-sarif@v4.37.9
         if: always() && (github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request')
         with:
           sarif_file: 'trivy-results.sarif'