diff --git a/.github/workflows/compile-and-publish.yml b/.github/workflows/compile-and-publish.yml
index 0925e4440..e67ee6a2f 100644
--- a/.github/workflows/compile-and-publish.yml
+++ b/.github/workflows/compile-and-publish.yml
@@ -45,7 +45,7 @@ jobs:
         working-directory: ${{ matrix.package }}
 
       - name: Publish ${{ matrix.name }}
-        uses: JS-DevTools/npm-publish@0897172f266b017b55f0d68271c4d9124eb20c69
+        uses: JS-DevTools/npm-publish@fe72237be0920f7a0cafd6a966c9b929c9466e9b
         id: publish
         with:
           token: ${{ secrets.NPM_TOKEN }}
@@ -126,7 +126,7 @@ jobs:
         working-directory: ${{ matrix.package }}
 
       - name: Publish ${{ matrix.name }}
-        uses: JS-DevTools/npm-publish@0897172f266b017b55f0d68271c4d9124eb20c69
+        uses: JS-DevTools/npm-publish@fe72237be0920f7a0cafd6a966c9b929c9466e9b
         id: publish
         with:
           token: ${{ secrets.NPM_TOKEN }}
diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml
index bb733b5c1..e30053fe9 100644
--- a/.github/workflows/ossf-scorecard.yml
+++ b/.github/workflows/ossf-scorecard.yml
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@b2dd2d646c3592c87c4080778d90e24b42eae566
+        uses: ossf/scorecard-action@ac08d68f0072360b14053ced3d54f9d89d0e7d44
         with:
           results_file: ossf-results.json
           results_format: json