diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ac028deaa..993ed7a15 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -38,7 +38,7 @@ jobs:
       run: |
         docker compose up -d db redis
     - name: Set up Node.js
-      uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: '.node-version'
         cache: 'yarn'
@@ -46,7 +46,7 @@ jobs:
       run: |
         yarn
     - name: Set up Ruby
-      uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1.229.0
+      uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # v1.245.0
       with:
         ruby-version: '.ruby-version'
         bundler-cache: true # runs 'bundle install' and caches installed gems automatically
diff --git a/.github/workflows/make-swagger-artifacts.yml b/.github/workflows/make-swagger-artifacts.yml
index 6dc2e616b..87612e799 100644
--- a/.github/workflows/make-swagger-artifacts.yml
+++ b/.github/workflows/make-swagger-artifacts.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
+        uses: aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df # v4.2.1
         with:
           aws-region: ap-northeast-1
           role-to-assume: arn:aws:iam::607167088920:role/github-actions-dreamkast
@@ -106,7 +106,7 @@ jobs:
 
       - name: Generate token
         id: generate_token
-        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
+        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.PRIVATE_KEY }}
diff --git a/.github/workflows/reviewapp.yml b/.github/workflows/reviewapp.yml
index 93d768865..9f21af5f7 100644
--- a/.github/workflows/reviewapp.yml
+++ b/.github/workflows/reviewapp.yml
@@ -27,7 +27,7 @@ jobs:
       pull-requests: write
     timeout-minutes: 3
     steps:
-      - uses: marocchino/sticky-pull-request-comment@52423e01640425a022ef5fd42c6fb5f633a02728 # v2.9.1
+      - uses: marocchino/sticky-pull-request-comment@d2ad0de260ae8b0235ce059e63f2949ba9e05943 # v2.9.3
         if: needs.reviewapp.outputs.outcome == 'success'
         with:
           number: ${{ needs.reviewapp.outputs.pr_number }}
@@ -36,7 +36,7 @@ jobs:
           message: |
             Review app
             * https://dreamkast-dk-${{ needs.reviewapp.outputs.pr_number }}.dev.cloudnativedays.jp
-      - uses: marocchino/sticky-pull-request-comment@52423e01640425a022ef5fd42c6fb5f633a02728 # v2.9.1
+      - uses: marocchino/sticky-pull-request-comment@d2ad0de260ae8b0235ce059e63f2949ba9e05943 # v2.9.3
         if: needs.reviewapp.outputs.outcome != 'success'
         with:
           number: ${{ needs.reviewapp.outputs.pr_number }}