diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 4c6d6831df..c0450239fe 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -42,7 +42,7 @@ jobs:
             maven-
 
       - name: 'Initialize CodeQL'
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@v4.37.4
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -70,7 +70,7 @@ jobs:
           mvn clean install -Dmaven.test.skip=true -Ddocker.skip=true -Dtest.onlyITs= -B -V -e -fae -q -DskipQA=true
 
       - name: 'Perform CodeQL Analysis'
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@v4.37.4
         with:
           category: "/language:${{ matrix.language }}"
           upload: false
@@ -89,7 +89,7 @@ jobs:
           output: "sarif-results/${{ matrix.language }}.sarif"
 
       - name: 'Upload sarif files'
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         with:
           sarif_file: "sarif-results/${{ matrix.language }}.sarif"
 
diff --git a/.github/workflows/owasp-dependency-check.yml b/.github/workflows/owasp-dependency-check.yml
index dea2213136..32ffebe14d 100644
--- a/.github/workflows/owasp-dependency-check.yml
+++ b/.github/workflows/owasp-dependency-check.yml
@@ -72,7 +72,7 @@ jobs:
           files: 'target/dependency-check-report.sarif'
 
       - name: 'Upload result to GitHub Code Scanning'
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         if: steps.check_files.outputs.files_exists == 'true'
         with:
           sarif_file: target/dependency-check-report.sarif
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index 0f41068844..7fdb706bba 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -57,7 +57,7 @@ jobs:
           files: "${{ matrix.docker-image }}-trivy-results.sarif"
 
       - name: 'Upload Trivy scan results to GitHub Security tab'
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         if: steps.check_files.outputs.files_exists == 'true'
         with:
           sarif_file: "${{ matrix.docker-image }}-trivy-results.sarif"