diff --git a/.github/workflows/pipeline.yaml b/.github/workflows/pipeline.yaml
index b829291..5daf1fe 100644
--- a/.github/workflows/pipeline.yaml
+++ b/.github/workflows/pipeline.yaml
@@ -25,7 +25,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
+        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/update-auto-merge.yaml b/.github/workflows/update-auto-merge.yaml
index 4c0daf9..fc3de31 100644
--- a/.github/workflows/update-auto-merge.yaml
+++ b/.github/workflows/update-auto-merge.yaml
@@ -12,7 +12,7 @@ jobs:
     if: (github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'renovate[bot]') && github.repository == 'a-zen/simple-server'
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
+        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
         with:
           egress-policy: audit