diff --git a/.github/workflows/checkov.yml b/.github/workflows/checkov.yml
index 934154f..31881ce 100644
--- a/.github/workflows/checkov.yml
+++ b/.github/workflows/checkov.yml
@@ -32,13 +32,13 @@ jobs:
         with:
           persist-credentials: false
       - name: Checkov GitHub Action
-        uses: bridgecrewio/checkov-action@a8664e3a0549367977f0cda990a34311835c87c0 # v12.3123.0
+        uses: bridgecrewio/checkov-action@444c9db6fa75e2d9c19ebf1fde7322089be9009e # v12.3125.0
         with:
           config_file: ${{ inputs['config-path'] || './configs/checkov.yml' }}
           directory: "."
           output_format: cli,sarif
           output_file_path: console,results.sarif
-      - uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+      - uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         if: (success() || failure()) && inputs['advanced-security']
         with:
           sarif_file: results.sarif