diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 5106a2c..8b6c845 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -23,12 +23,12 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4
         with:
           languages: javascript
 
       - name: Run CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4
 
   dependency-review:
     name: Dependency Review