diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 20dfac8..8e0e5bd 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -35,10 +35,10 @@ jobs:
         language: ["javascript-typescript"]
     steps:
       - uses: actions/checkout@v6
-      - uses: github/codeql-action/init@v4
+      - uses: github/codeql-action/init@v4.37.4
         with:
           languages: ${{ matrix.language }}
           queries: security-extended,security-and-quality
-      - uses: github/codeql-action/analyze@v4
+      - uses: github/codeql-action/analyze@v4.37.4
         with:
           category: "/language:${{ matrix.language }}"