diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 979baf1..2419f65 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -53,7 +53,7 @@ jobs:
             swiftpm-macos-26-xcode-26_4-
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@v4.37.3
         with:
           languages: swift
           build-mode: manual
@@ -78,4 +78,4 @@ jobs:
             CODE_SIGNING_ALLOWED=NO
 
       - name: Analyze CodeQL
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@v4.37.3