diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml
index 079d4912..888a4cb7 100644
--- a/.github/workflows/build-push.yml
+++ b/.github/workflows/build-push.yml
@@ -93,7 +93,7 @@ jobs:
         with:
           image: ${{ env.REGISTRY }}/${{ github.repository }}-${{ matrix.flavor }}@${{ steps.build-and-push.outputs.digest }}
           dependency-snapshot: true
-      - uses: actions/dependency-review-action@72eb03d02c7872a771aacd928f3123ac62ad6d3a # v4.3.3
+      - uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
         if: github.event_name == 'pull_request'
         with:
           comment-summary-in-pr: on-failure
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a46afd82..2ca6b482 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -58,6 +58,6 @@ jobs:
         with:
           merge-multiple: true
           pattern: test-results-*
-      - uses: EnricoMi/publish-unit-test-result-action@30eadd5010312f995f0d3b3cff7fe2984f69409e # v2.16.1
+      - uses: EnricoMi/publish-unit-test-result-action@567cc7f8dcea3eba5da355f6ebc95663310d8a07 # v2.17.0
         with:
           files: test-report-*.xml