diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index d0fa617b..fb1495d1 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -112,7 +112,7 @@ jobs:
       - name: Check out the repository
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       - name: Run Anchore vulnerability scanner
-        uses: anchore/scan-action@bc9adf64917dd9444d6cf4dd68620c34ca3a5f69
+        uses: anchore/scan-action@64a33b277ea7a1215a3c142735a1091341939ff5
         id: scan
         with:
           path: "."
@@ -123,7 +123,7 @@ jobs:
         run: cat ${{ steps.scan.outputs.sarif }}
       - name: Upload Anchore scan SARIF report
         if: always()
-        uses: github/codeql-action/upload-sarif@883d8588e56d1753a8a58c1c86e88976f0c23449
+        uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}
 
diff --git a/.github/workflows/report.yml b/.github/workflows/report.yml
index 5d44008b..e42d53a5 100644
--- a/.github/workflows/report.yml
+++ b/.github/workflows/report.yml
@@ -20,7 +20,7 @@ jobs:
       - name: Check out the repository
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       - name: Run Anchore vulnerability scanner
-        uses: anchore/scan-action@bc9adf64917dd9444d6cf4dd68620c34ca3a5f69
+        uses: anchore/scan-action@64a33b277ea7a1215a3c142735a1091341939ff5
         id: scan
         with:
           path: "."
@@ -28,6 +28,6 @@ jobs:
       - name: Show Anchore scan SARIF report
         run: cat ${{ steps.scan.outputs.sarif }}
       - name: Upload Anchore scan SARIF report
-        uses: github/codeql-action/upload-sarif@883d8588e56d1753a8a58c1c86e88976f0c23449
+        uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}