diff --git a/.github/workflows/secure-tests.yml b/.github/workflows/secure-tests.yml
index 4442054b..fa270c57 100644
--- a/.github/workflows/secure-tests.yml
+++ b/.github/workflows/secure-tests.yml
@@ -195,7 +195,7 @@ jobs:
           node-version: '24'
 
       - name: Set Up Java
-        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           distribution: 'temurin'
           java-version: '21'
diff --git a/.github/workflows/security-analysis.yml b/.github/workflows/security-analysis.yml
index cdaa4291..85eaf876 100644
--- a/.github/workflows/security-analysis.yml
+++ b/.github/workflows/security-analysis.yml
@@ -52,4 +52,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3
+        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4