diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e3f9db202b..2e0ff8a074 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -103,7 +103,7 @@ jobs:
           swift --version
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@v4.35.3
         with:
           languages: ${{ matrix.language }}
           queries: security-and-quality
@@ -111,7 +111,7 @@ jobs:
 
       - name: Autobuild
         if: matrix.needs_autobuild
-        uses: github/codeql-action/autobuild@v4
+        uses: github/codeql-action/autobuild@v4.35.3
 
       - name: Build Android for CodeQL
         if: matrix.language == 'java-kotlin'
@@ -132,6 +132,6 @@ jobs:
             CODE_SIGNING_ALLOWED=NO
 
       - name: Analyze
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@v4.35.3
         with:
           category: "/language:${{ matrix.language }}"