diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index b65bea3..5b94ba7 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -27,7 +27,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
       # ── Backend ──────────────────────────────────────────────────────────────
       - name: Build backend image
@@ -53,7 +53,7 @@ jobs:
           format: table
 
       - name: Generate backend SBOM (Syft)
-        uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
+        uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2
         with:
           image: querygateway-backend:ci
           format: spdx-json
@@ -84,7 +84,7 @@ jobs:
           format: table
 
       - name: Generate frontend SBOM (Syft)
-        uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
+        uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2
         with:
           image: querygateway-frontend:ci
           format: spdx-json
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 289644c..232df67 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -56,7 +56,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Scan lockfiles against the OSV database
-        uses: google/osv-scanner-action/osv-scanner-action@8deb546fdb875b9996d27d4950be7312dac076a1 # v2.5.0
+        uses: google/osv-scanner-action/osv-scanner-action@6e4298ebc4db23e847df9b2e2de2939d6f066c67 # v2.5.1
         with:
           scan-args: |-
             --recursive