diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c9e6fc0..ebbe576 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -67,7 +67,7 @@ jobs:
           python-version: "3.12"
       - run: python -m pip install .
       - run: agentguard scan src --format sarif --output agentguard.sarif --fail-on high
-      - uses: github/codeql-action/upload-sarif@v4.37.3
+      - uses: github/codeql-action/upload-sarif@v4.37.5
         if: always() && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
         with:
           sarif_file: agentguard.sarif
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 0e9a4fa..6b5181c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: github/codeql-action/init@v4.37.3
+      - uses: github/codeql-action/init@v4.37.5
         with:
           languages: python
-      - uses: github/codeql-action/analyze@v4.37.3
+      - uses: github/codeql-action/analyze@v4.37.5