diff --git a/.github/workflows/run-dependency-check.yml b/.github/workflows/run-dependency-check.yml
index a68b999..5408f1a 100644
--- a/.github/workflows/run-dependency-check.yml
+++ b/.github/workflows/run-dependency-check.yml
@@ -53,17 +53,17 @@ jobs:
     name: Check dependencies
     runs-on: ${{ inputs.runner-os }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           show-progress: false
       - name: Setup Java
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           distribution: ${{ inputs.java-distribution }}
           java-version: ${{ inputs.java-version }}
           cache: 'maven'
       - name: Cache NVD DB
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.m2/repository/org/owasp/dependency-check-data/
           key: dependency-check-${{ github.run_id }}
diff --git a/.github/workflows/update-dependency-check.yml b/.github/workflows/update-dependency-check.yml
index b8fd579..7f076b4 100644
--- a/.github/workflows/update-dependency-check.yml
+++ b/.github/workflows/update-dependency-check.yml
@@ -20,7 +20,7 @@ jobs:
     name: Update dependency-check version
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           show-progress: false
           # PAT is required because the default GITHUB_TOKEN may not modify files under .github/workflows/.