diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ecf9e2e..e5a71d3 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,7 +26,7 @@ jobs:
         with:
           go-version-file: go.work
           cache: false
-      - uses: github/codeql-action/init@v4
+      - uses: github/codeql-action/init@v4.37.4
         with: { languages: "${{ matrix.language }}" }
-      - uses: github/codeql-action/autobuild@v4
-      - uses: github/codeql-action/analyze@v4
+      - uses: github/codeql-action/autobuild@v4.37.4
+      - uses: github/codeql-action/analyze@v4.37.4