diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
index 8345a95..3d219b7 100644
--- a/.github/workflows/node.js.yml
+++ b/.github/workflows/node.js.yml
@@ -13,12 +13,12 @@ jobs:
       security-events: write
     steps:
       - uses: actions/checkout@v7
-      - uses: github/codeql-action/init@v4
+      - uses: github/codeql-action/init@v4.37.3
         with:
           languages: typescript
           build-mode: none
           queries: +security-and-quality
-      - uses: github/codeql-action/analyze@v4
+      - uses: github/codeql-action/analyze@v4.37.3
 
   build:
     runs-on: ubuntu-latest