diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index ec4ad71c4b8ea..d65f3b0cb30f6 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -19,9 +19,9 @@ jobs:
     runs-on: ubuntu-latest-low
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           persist-credentials: false
 
       - name: REUSE Compliance Check
-        uses: fsfe/reuse-action@bb774aa972c2a89ff34781233d275075cbddf542 # v5.0.0
+        uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0
diff --git a/build/frontend-legacy/WebpackSPDXPlugin.cjs b/build/frontend-legacy/WebpackSPDXPlugin.cjs
index 441a62d560984..209405af4f1cc 100644
--- a/build/frontend-legacy/WebpackSPDXPlugin.cjs
+++ b/build/frontend-legacy/WebpackSPDXPlugin.cjs
@@ -203,8 +203,10 @@ class WebpackSPDXPlugin {
 					const match = source.match(/asset\/inline\|data:image\/svg\+xml,(.+)/)
 					if (match) {
 						const content = decodeURI(match[1])
+						// REUSE-IgnoreStart
 						const [, license] = content.match(/SPDX-License-Identifier:\s*([^\s]+)/) ?? []
 						const [, author] = content.match(/SPDX-FileCopyrightText:\s*([^-]+)/) ?? []
+						// REUSE-IgnoreEnd
 						if (author && license) {
 							authors.add(author)
 							licenses.add(license)
@@ -219,10 +221,14 @@ class WebpackSPDXPlugin {
 			}
 
 			for (const author of [...authors].sort()) {
+				// REUSE-IgnoreStart
 				output = `SPDX-FileCopyrightText: ${author}\n${output}`
+				// REUSE-IgnoreEnd
 			}
 			for (const license of [...licenses].sort()) {
+				// REUSE-IgnoreStart
 				output = `SPDX-License-Identifier: ${license}\n${output}`
+				// REUSE-IgnoreEnd
 			}
 
 			compilation.emitAsset(