diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0f77394b8a..d6fce62465 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ jobs:
                 python-version: "3.14"
 
             - name: Setup node.js for rapydscript
-              uses: actions/setup-node@v6
+              uses: actions/setup-node@v6.3.0
               with:
                 node-version: "latest"
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6662c11da9..5b9118d062 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -46,13 +46,13 @@ jobs:
 
         # Initializes the CodeQL tools for scanning.
         - name: Initialize CodeQL
-          uses: github/codeql-action/init@v4
+          uses: github/codeql-action/init@v4.35.1
           with:
               languages: ${{ matrix.language }}
               trap-caching: false
 
         - name: Setup node.js for rapydscript
-          uses: actions/setup-node@v6
+          uses: actions/setup-node@v6.3.0
           with:
             node-version: "latest"
 
@@ -67,4 +67,4 @@ jobs:
               python setup/unix-ci.py bootstrap
 
         - name: Perform CodeQL Analysis
-          uses: github/codeql-action/analyze@v4
+          uses: github/codeql-action/analyze@v4.35.1