diff --git a/.github/workflows/__code-analysis--codeql.yml b/.github/workflows/__code-analysis--codeql.yml
index 1138f553..9e6a3066 100644
--- a/.github/workflows/__code-analysis--codeql.yml
+++ b/.github/workflows/__code-analysis--codeql.yml
@@ -30,16 +30,16 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b2c19fb9a2a485599ccf4ed5d65527d94bc57226 # v2
+        uses: github/codeql-action/init@489225d82a57396c6f426a40e66d461b16b3461d # v2
         with:
           languages: javascript
 
       # Autobuild attempts to build any compiled languages
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b2c19fb9a2a485599ccf4ed5d65527d94bc57226 # v2
+        uses: github/codeql-action/autobuild@489225d82a57396c6f426a40e66d461b16b3461d # v2
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b2c19fb9a2a485599ccf4ed5d65527d94bc57226 # v2
+        uses: github/codeql-action/analyze@489225d82a57396c6f426a40e66d461b16b3461d # v2
 
       - name: Setup Job
         id: setup
@@ -53,7 +53,7 @@ jobs:
             --configuration=codeql
 
       - name: Upload Lint CodeQL
-        uses: github/codeql-action/upload-sarif@b2c19fb9a2a485599ccf4ed5d65527d94bc57226 # v2
+        uses: github/codeql-action/upload-sarif@489225d82a57396c6f426a40e66d461b16b3461d # v2
         with:
           sarif_file: reports/packages/nx-mesh/lint.sarif
           wait-for-processing: true