diff --git a/.github/workflows/create-fork.yaml b/.github/workflows/create-fork.yaml
index 212aa9c..9cea2c4 100644
--- a/.github/workflows/create-fork.yaml
+++ b/.github/workflows/create-fork.yaml
@@ -39,7 +39,7 @@ jobs:
 
       - name: Parse and validate input
         id: parse-upstream
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           UPSTREAM_REPO: ${{ inputs.upstream_repo }}
           FORK_NAME: ${{ inputs.fork_name }}
diff --git a/.github/workflows/tf-plan.yaml b/.github/workflows/tf-plan.yaml
index 9aec62f..05857c4 100644
--- a/.github/workflows/tf-plan.yaml
+++ b/.github/workflows/tf-plan.yaml
@@ -73,7 +73,7 @@ jobs:
           owner: ${{ github.repository_owner }}
 
       - name: Create in-progress check-run
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           COMMIT_SHA: ${{ inputs.commit_sha }}
         with:
@@ -118,7 +118,7 @@ jobs:
 
       - name: Post plan summary and handle check-run
         if: always()
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           PLAN_SUMMARY: ${{ steps.graformer.outputs.plan-summary }}
           PR_NUMBER: ${{ github.event.workflow_run.pull_requests[0].number }}