diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6f4190e..9b94061 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,7 +35,7 @@ jobs:
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
-      - uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7
+      - uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7
 
       - id: setup-python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
diff --git a/.github/workflows/scans.yml b/.github/workflows/scans.yml
index b944447..101fa9a 100644
--- a/.github/workflows/scans.yml
+++ b/.github/workflows/scans.yml
@@ -25,7 +25,7 @@ jobs:
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
-      - uses: bridgecrewio/checkov-action@5051a5cfc7e4c71d95199f81ffafbb490c7e6213 # master
+      - uses: bridgecrewio/checkov-action@f34885219720066007f948b843e747bb136aa223 # master
         with:
           soft_fail: ${{ github.event_name != 'pull_request' }}