diff --git a/.github/workflows/hybrid-gate-adapter.yml b/.github/workflows/hybrid-gate-adapter.yml
index d365a23..31ee96d 100644
--- a/.github/workflows/hybrid-gate-adapter.yml
+++ b/.github/workflows/hybrid-gate-adapter.yml
@@ -131,7 +131,7 @@ jobs:
           cache-all-crates: true
 
       - name: Install pinned cargo-nextest
-        uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2
         with:
           tool: nextest@0.9.140
 
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index e073f3a..8cdffc3 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -37,7 +37,7 @@ jobs:
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           persist-credentials: false
-      - uses: EmbarkStudios/cargo-deny-action@6c8f9facfa5047ec02d8485b6bf52b587b7777d1 # v2.0.18
+      - uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1
         with:
           command: check advisories licenses bans sources
           arguments: --all-features
@@ -52,7 +52,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           persist-credentials: false
       - name: Install pinned cargo-audit
-        uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2
         with:
           tool: cargo-audit@0.22.2
       - name: cargo audit