diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 11a6c08a..a21e174c 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -25,8 +25,8 @@ jobs:
       with:
         show-progress: false
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+      uses: github/codeql-action/init@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
       with:
         languages: javascript-typescript
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+      uses: github/codeql-action/analyze@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
diff --git a/.github/workflows/release-docker.yml b/.github/workflows/release-docker.yml
index fc1d9107..2b1f0690 100644
--- a/.github/workflows/release-docker.yml
+++ b/.github/workflows/release-docker.yml
@@ -83,7 +83,7 @@ jobs:
           org.opencontainers.image.documentation=https://docs.mia-platform.eu/docs/marketplace/handbooks/crud-oss-usage
           org.opencontainers.image.vendor=Mia s.r.l.
     - name: Setup Buildx Context
-      uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
+      uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
       id: buildx
       with:
         platforms: linux/amd64,linux/arm64
@@ -109,7 +109,7 @@ jobs:
         registry-password: ${{ secrets.nexus_token }}
         stop-on-processing-error: true
     - name: Generate SBOM
-      uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8
+      uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9
       if: github.ref_type == 'tag'
       with:
         artifact-name: crud-service-sbom.spdx.json
diff --git a/.github/workflows/tag.yml b/.github/workflows/tag.yml
index f33b4684..07356508 100644
--- a/.github/workflows/tag.yml
+++ b/.github/workflows/tag.yml
@@ -38,7 +38,7 @@ jobs:
           show-progress: false
 
       - name: Release
-        uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # v2.1.0
+        uses: softprops/action-gh-release@7b4da11513bf3f43f9999e90eabced41ab8bb048 # v2.2.0
         with:
           generate_release_notes: true
           prerelease: ${{ startsWith(github.ref, 'refs/tags/') && contains(github.ref, '-rc.') }}