diff --git a/.github/workflows/aws_conformance_ci.yml b/.github/workflows/aws_conformance_ci.yml
index aed02710..3da8bddb 100644
--- a/.github/workflows/aws_conformance_ci.yml
+++ b/.github/workflows/aws_conformance_ci.yml
@@ -42,7 +42,7 @@ jobs:
       # Authenticate with ECR to push the conformance and hammer images.
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1
+        uses: aws-actions/amazon-ecr-login@c962da2960ed15f492addc26fffa274485265950 # v2.0.2
 
       # Build the conformance image and push it to ECR. This will be used later on by Terragrunt.
       - name: Build, tag, and push Conformance image to Amazon ECR
diff --git a/.github/workflows/ko_build.yml b/.github/workflows/ko_build.yml
index 864b8a6c..bf1f1856 100644
--- a/.github/workflows/ko_build.yml
+++ b/.github/workflows/ko_build.yml
@@ -32,7 +32,7 @@ jobs:
         uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9.0
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
+        uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
 
       - name: Login to GHCR
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0