diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 24d8dd9ee4..ddd1861e66 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -170,7 +170,7 @@ jobs:
 
       # Check for any typos
       - name: Check for typos
-        uses: crate-ci/typos@v1.23.1
+        uses: crate-ci/typos@v1.23.2
         with:
           config: .github/workflows/typos.toml
 
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
index c4420ce688..26450f8961 100644
--- a/.github/workflows/security.yaml
+++ b/.github/workflows/security.yaml
@@ -114,7 +114,7 @@ jobs:
           echo "image=$(cat "$image_job")" >> $GITHUB_OUTPUT
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@7c2007bcb556501da015201bcba5aa14069b74e2
+        uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8
         with:
           image-ref: ${{ steps.build.outputs.image }}
           format: sarif