diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e86ec6e..2cbc4c1 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -62,7 +62,7 @@ jobs:
             swiftpm-macos-26-xcode-26_4-
 
       - name: CodeQL initialisieren
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@v4.37.4
         with:
           languages: swift
           build-mode: manual
@@ -85,4 +85,4 @@ jobs:
             CODE_SIGNING_ALLOWED=NO
 
       - name: CodeQL auswerten
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@v4.37.4