diff --git a/.github/workflows/check-cves.yml b/.github/workflows/check-cves.yml
index 011e96d8eeb..30da380fd10 100644
--- a/.github/workflows/check-cves.yml
+++ b/.github/workflows/check-cves.yml
@@ -14,7 +14,7 @@ jobs:
 
     - name: Scan current project
       id: scan
-      uses: anchore/scan-action@v6
+      uses: anchore/scan-action@v7
       with:
         path: "."
         add-cpes-if-none: true
diff --git a/.github/workflows/util-code-quality.yml b/.github/workflows/util-code-quality.yml
index b18b7ee5f47..f9079296c26 100644
--- a/.github/workflows/util-code-quality.yml
+++ b/.github/workflows/util-code-quality.yml
@@ -25,15 +25,15 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: go
           config-file: ./.github/codeql/codeql-config.yml
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
 
 # vim: set sw=2 ts=2 sts=2 et tw=78 foldlevel=2 fdm=indent nospell: