diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 069ed47b..ab3e71b2 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -51,7 +51,7 @@ jobs:
         run: (pnpm audit --production --json > audit-results.json) || echo '{}' > audit-results.json
 
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # v3.97.1
+        uses: trufflesecurity/trufflehog@4dd8831c5f12599465d4d45c3c447b4018a34c85 # v3.97.9
         with:
           extra_args: --only-verified
 
diff --git a/.github/workflows/typos.yml b/.github/workflows/typos.yml
index 39e12fa1..7273244c 100644
--- a/.github/workflows/typos.yml
+++ b/.github/workflows/typos.yml
@@ -32,4 +32,4 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Check spelling
-        uses: crate-ci/typos@4d9c206a77c041268485162b8e2579ad7a5cb9a3 # v1.50.0
+        uses: crate-ci/typos@00f422f3b19c57bc6338715ebfe3316d38768461 # v1.50.3