diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 9d4abeb..3f7f764 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -126,12 +126,12 @@ jobs:
           path: ${{ needs.setup.outputs.checkout_path }}
           repository: ${{ needs.setup.outputs.repo }}
           persist-credentials: false
-      - uses: github/codeql-action/init@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3
+      - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           languages: actions
           build-mode: none
           queries: security-extended
           source-root: ${{ needs.setup.outputs.checkout_path }}
-      - uses: github/codeql-action/analyze@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3
+      - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           checkout_path: ${{ needs.setup.outputs.checkout_path }}