diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7ce07d51b..4ea1a3552 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -90,7 +90,7 @@ jobs:
           touch /mnt/foo
           ls -la /mnt/foo
       - name: Run sccache-cache
-        uses: mozilla-actions/sccache-action@v0.0.6
+        uses: mozilla-actions/sccache-action@v0.0.7
 
       - name: Configure Cache Env
         uses: actions/github-script@v7
diff --git a/.github/workflows/daily-builds.yml b/.github/workflows/daily-builds.yml
index 7c319b167..d94e3b9a4 100644
--- a/.github/workflows/daily-builds.yml
+++ b/.github/workflows/daily-builds.yml
@@ -38,7 +38,7 @@ jobs:
         with:
           submodules: true
       - name: Run sccache-cache
-        uses: mozilla-actions/sccache-action@v0.0.6
+        uses: mozilla-actions/sccache-action@v0.0.7
 
       - name: Configure Cache Env
         uses: actions/github-script@v7
@@ -75,7 +75,7 @@ jobs:
         with:
           submodules: true
       - name: Run sccache-cache
-        uses: mozilla-actions/sccache-action@v0.0.6
+        uses: mozilla-actions/sccache-action@v0.0.7
 
       - name: Configure Cache Env
         uses: actions/github-script@v7
diff --git a/.github/workflows/daily-sanitizers.yml b/.github/workflows/daily-sanitizers.yml
index dd45f20d5..f5580c7c9 100644
--- a/.github/workflows/daily-sanitizers.yml
+++ b/.github/workflows/daily-sanitizers.yml
@@ -33,7 +33,7 @@ jobs:
           submodules: true
 
       - name: Run sccache-cache
-        uses: mozilla-actions/sccache-action@v0.0.6
+        uses: mozilla-actions/sccache-action@v0.0.7
 
       - name: Configure Cache Env
         uses: actions/github-script@v7
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 7af051481..68729fbed 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -68,6 +68,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
         with:
           sarif_file: results.sarif