diff --git a/.github/workflows/part_build.yml b/.github/workflows/part_build.yml
index 9e9555c..e41695a 100644
--- a/.github/workflows/part_build.yml
+++ b/.github/workflows/part_build.yml
@@ -68,7 +68,7 @@ jobs:
 
       - run: mix release --overwrite
       - name: "Attest provenance"
-        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0
+        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
         id: attest-provenance
         if: "${{ inputs.attest }}"
         with:
diff --git a/.github/workflows/part_docs.yml b/.github/workflows/part_docs.yml
index f11d59c..272c096 100644
--- a/.github/workflows/part_docs.yml
+++ b/.github/workflows/part_docs.yml
@@ -35,7 +35,7 @@ jobs:
         run: "tar -czvf docs.tar.gz doc"
       
       - name: "Attest docs provenance"
-        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0
+        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
         id: attest-docs-provenance
         if: "${{ inputs.attest }}"
         with:
diff --git a/.github/workflows/part_report_deps.yml b/.github/workflows/part_report_deps.yml
index c2d3b81..7d48e86 100644
--- a/.github/workflows/part_report_deps.yml
+++ b/.github/workflows/part_report_deps.yml
@@ -58,7 +58,7 @@ jobs:
           comparison: "notEqual"
 
       - name: "Validate Output submission-json-path file contents valid JSON"
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const fs = require('fs');
diff --git a/.github/workflows/part_test.yml b/.github/workflows/part_test.yml
index 91814bf..0a68ac2 100644
--- a/.github/workflows/part_test.yml
+++ b/.github/workflows/part_test.yml
@@ -63,7 +63,7 @@ jobs:
 
       - run: mix credo --format sarif > results.sarif
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
+        uses: github/codeql-action/upload-sarif@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.30.1
         with:
           sarif_file: results.sarif
           category: credo
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 41a9b63..ee14a9b 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -75,4 +75,4 @@ jobs:
       - name: 'Checkout Repository'
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@bc41886e18ea39df68b1b1245f4184881938e050 # v4.7.2
\ No newline at end of file
+        uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
\ No newline at end of file
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index edbdbdb..dc9e4fd 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -76,6 +76,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
+        uses: github/codeql-action/upload-sarif@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.30.1
         with:
           sarif_file: results.sarif