diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 89b5d3de58..1e6ffed237 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -46,7 +46,7 @@ jobs:
       - uses: actions/checkout@v3
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2.3.3
+        uses: github/codeql-action/init@v2.3.6
         with:
           languages: java
 
@@ -54,7 +54,7 @@ jobs:
         uses: ./.github/actions/build-keycloak
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2.3.3
+        uses: github/codeql-action/analyze@v2.3.6
         with:
           wait-for-processing: true
         env:
@@ -75,7 +75,7 @@ jobs:
       - uses: actions/checkout@v3
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2.3.3
+        uses: github/codeql-action/init@v2.3.6
         env:
           CODEQL_ACTION_EXTRA_OPTIONS: '{"database":{"finalize":["--no-run-unnecessary-builds"]}}'
         with:
@@ -83,7 +83,7 @@ jobs:
           source-root: themes/src/main/
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2.3.3
+        uses: github/codeql-action/analyze@v2.3.6
         with:
           wait-for-processing: true
         env:
diff --git a/.github/workflows/snyk-analysis.yml b/.github/workflows/snyk-analysis.yml
index 0f883e7b43..d1c0dc1901 100644
--- a/.github/workflows/snyk-analysis.yml
+++ b/.github/workflows/snyk-analysis.yml
@@ -27,7 +27,7 @@ jobs:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
 
       - name: Upload Quarkus scanner results to GitHub
-        uses: github/codeql-action/upload-sarif@v2.3.3
+        uses: github/codeql-action/upload-sarif@v2.3.6
         with:
           sarif_file: quarkus-report.sarif
           category: snyk-quarkus-report
@@ -41,7 +41,7 @@ jobs:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
 
       - name: Upload Operator scanner results to GitHub
-        uses: github/codeql-action/upload-sarif@v2.3.3
+        uses: github/codeql-action/upload-sarif@v2.3.6
         with:
           sarif_file: operator-report.sarif
           category: snyk-operator-report
diff --git a/.github/workflows/trivy-analysis.yml b/.github/workflows/trivy-analysis.yml
index 8b025fdc32..3fe9b3cf70 100644
--- a/.github/workflows/trivy-analysis.yml
+++ b/.github/workflows/trivy-analysis.yml
@@ -33,6 +33,6 @@ jobs:
           timeout: 15m
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2.3.3
+        uses: github/codeql-action/upload-sarif@v2.3.6
         with:
           sarif_file: trivy-results.sarif