diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index 5321f71..b298c8b 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   sbom:
-    uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@aa759c845c83060e2473fd8df60f9f408e34675d
+    uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@5e1ea380f75b02891de776dcc00e74ad7cfeca9c
     with:
       sbom_name: ${{ github.event.release.tag_name || github.sha }}
     permissions:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b57cb84..a199350 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -18,7 +18,7 @@ jobs:
           chmod a+w tests_output
 
       - name: Setup docker-compose
-        uses: docker/setup-compose-action@4eb059ff7f16592f9c84d5ca339c53cb7c5064e2 # v2.3.0
+        uses: docker/setup-compose-action@54042514f505b273907334ae2b9cdbb9a0213c1a # v2.4.0
 
       - name: Build containers
         run: docker compose build