diff --git a/.github/workflows/code-qa.yml b/.github/workflows/code-qa.yml
index 257f263..eed881e 100644
--- a/.github/workflows/code-qa.yml
+++ b/.github/workflows/code-qa.yml
@@ -210,7 +210,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v6
-      - uses: google/osv-scanner-action/osv-scanner-action@v2.3.8
+      - uses: google/osv-scanner-action/osv-scanner-action@v2.5.0
         with:
           scan-args: |-
             --lockfile=pnpm-lock.yaml
diff --git a/.github/workflows/security-scheduled.yml b/.github/workflows/security-scheduled.yml
index d9f0a41..c50941e 100644
--- a/.github/workflows/security-scheduled.yml
+++ b/.github/workflows/security-scheduled.yml
@@ -23,7 +23,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
-      - uses: trufflesecurity/trufflehog@v3.95.5
+      - uses: trufflesecurity/trufflehog@v3.96.0
         with:
           path: ./
           base: ""