diff --git a/.github/workflows/benchmark.yaml b/.github/workflows/benchmark.yaml
index b74090222..3b0d13ac0 100644
--- a/.github/workflows/benchmark.yaml
+++ b/.github/workflows/benchmark.yaml
@@ -60,7 +60,7 @@ jobs:
           cache: false
 
       - name: Setup ORAS
-        uses: oras-project/setup-oras@1d808f7d7f6995cc68b7bf507bfe5c5446e1dc9d # v2.0.1
+        uses: oras-project/setup-oras@005458ad77f1c8facd38a094e4af2e69e5607ff4 # v2.0.2
 
       - name: Prepare benchmark data
         run: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 7312ef0b7..8f6e12914 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -72,7 +72,7 @@ jobs:
           disable-telemetry: true
 
       - name: Free Disk Space (Ubuntu)
-        uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
+        uses: jlumbroso/free-disk-space@3f13feab2962a87273d379ebc36ea159527e6cc9 # v1.3.2
         with:
           docker-images: false
           swap-storage: false