diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 90ec1b3..c2ec949 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -95,14 +95,14 @@ jobs:
 
       - name: Initialize CodeQL
         if: ${{ steps.selection.outputs.enabled == 'true' }}
-        uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build_mode }}
 
       - name: Analyze
         if: ${{ steps.selection.outputs.enabled == 'true' }}
-        uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           category: /language:${{ matrix.language }}
           output: artifacts/codeql/${{ matrix.language }}
diff --git a/.github/workflows/container-security.yml b/.github/workflows/container-security.yml
index d964d66..98ce7b3 100644
--- a/.github/workflows/container-security.yml
+++ b/.github/workflows/container-security.yml
@@ -81,14 +81,14 @@ jobs:
 
       - name: Upload server findings to code scanning
         if: ${{ always() && hashFiles('artifacts/container-security/vyral-server.sarif') != '' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) }}
-        uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+        uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           sarif_file: artifacts/container-security/vyral-server.sarif
           category: /container:vyral-server
 
       - name: Upload worker findings to code scanning
         if: ${{ always() && hashFiles('artifacts/container-security/execution-smoke-worker.sarif') != '' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) }}
-        uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+        uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           sarif_file: artifacts/container-security/execution-smoke-worker.sarif
           category: /container:execution-smoke-worker