diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a83c403e..f8e327c8 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,7 +23,7 @@ jobs:
       - name: Setup
         run: script/ci_setup.sh
       - name: CodeQL Initialization
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@v4.37.4
         with:
           languages: cpp, actions
           queries: +security-and-quality
@@ -32,4 +32,4 @@ jobs:
             paths-ignore:
             - 'googletest/**'
       - name: CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@v4.37.4