diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
index 936461d..60f482c 100644
--- a/.github/workflows/build_and_test.yml
+++ b/.github/workflows/build_and_test.yml
@@ -12,10 +12,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository code
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # pin@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4.2.2
 
       - name: Cache bazel build artifacts
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # pin@v3.3.1
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # pin@v4.2.3
         with:
           path: |
             ~/.cache/bazel
diff --git a/.github/workflows/build_and_test_cmake.yml b/.github/workflows/build_and_test_cmake.yml
index c0d2614..f224c76 100644
--- a/.github/workflows/build_and_test_cmake.yml
+++ b/.github/workflows/build_and_test_cmake.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4.2.2
         with:
           submodules: recursive
       - uses: seanmiddleditch/gha-setup-ninja@master
@@ -23,7 +23,7 @@ jobs:
 
       - name: Cache LLVM artifact
         id: cache-llvm
-        uses: actions/cache@v3
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # pin@v4.2.3
         with:
           path: |
             ./externals/llvm-project
@@ -31,7 +31,7 @@ jobs:
 
       - name: Cache mlir-tutorial build
         id: cache-mlir-tutorial
-        uses: actions/cache@v3
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # pin@v4.2.3
         with:
           path: |
             ./build