diff --git a/.github/workflows/part_build.yml b/.github/workflows/part_build.yml
index 6752dde..bce23c2 100644
--- a/.github/workflows/part_build.yml
+++ b/.github/workflows/part_build.yml
@@ -68,7 +68,7 @@ jobs:
 
       - run: mix release --overwrite
       - name: "Attest provenance"
-        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
+        uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0
         id: attest-provenance
         if: "${{ inputs.attest }}"
         with:
diff --git a/.github/workflows/part_docs.yml b/.github/workflows/part_docs.yml
index 4312317..d8cd616 100644
--- a/.github/workflows/part_docs.yml
+++ b/.github/workflows/part_docs.yml
@@ -35,7 +35,7 @@ jobs:
         run: "tar -czvf docs.tar.gz doc"
       
       - name: "Attest docs provenance"
-        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
+        uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0
         id: attest-docs-provenance
         if: "${{ inputs.attest }}"
         with:
diff --git a/.github/workflows/part_test.yml b/.github/workflows/part_test.yml
index a210870..5e118ef 100644
--- a/.github/workflows/part_test.yml
+++ b/.github/workflows/part_test.yml
@@ -64,7 +64,7 @@ jobs:
 
       - run: mix credo --format sarif > results.sarif
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
+        uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
         with:
           sarif_file: results.sarif
           category: credo
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 5b77b77..ae62d7e 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -76,6 +76,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
+        uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
         with:
           sarif_file: results.sarif