diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index 7f0a0b9..fc1cbb0 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -14,6 +14,6 @@ permissions:
 
 jobs:
   sbom:
-    uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@5cc2b20e42d53d1643853f12244fbec9ed2f2e0c
+    uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@aa759c845c83060e2473fd8df60f9f408e34675d # v1.2
     with:
       sbom_name: ${{ github.event.release.tag_name || github.sha }}
diff --git a/.github/workflows/ssdlc-actions.yml b/.github/workflows/ssdlc-actions.yml
index dc36895..3afb20b 100644
--- a/.github/workflows/ssdlc-actions.yml
+++ b/.github/workflows/ssdlc-actions.yml
@@ -14,4 +14,4 @@ jobs:
   code-security-analysis:
     permissions:
       security-events: write # required for uploading code scanning alerts
-    uses: mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml@507c5535545434e6892219c12d8d56a2b39bf710 # v1.1
+    uses: mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml@aa759c845c83060e2473fd8df60f9f408e34675d # v1.2