diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ae0afb7..f538b88 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ jobs:
         uses: actions/checkout@v6.0.2
 
       - name: Harden runner (audit)
-        uses: step-security/harden-runner@v2.15.0
+        uses: step-security/harden-runner@v2.19.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 3b3a6cf..88bc0f4 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -46,7 +46,7 @@ jobs:
         uses: actions/checkout@v6.0.2
 
       - name: Harden runner (audit)
-        uses: step-security/harden-runner@v2.15.0
+        uses: step-security/harden-runner@v2.19.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/destroy.yml b/.github/workflows/destroy.yml
index 925c426..3ddf983 100644
--- a/.github/workflows/destroy.yml
+++ b/.github/workflows/destroy.yml
@@ -46,7 +46,7 @@ jobs:
         uses: actions/checkout@v6.0.2
 
       - name: Harden runner (audit)
-        uses: step-security/harden-runner@v2.15.0
+        uses: step-security/harden-runner@v2.19.1
         with:
           egress-policy: audit