diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index fc1cbb0..a0ed1a1 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -14,6 +14,6 @@ permissions:
 
 jobs:
   sbom:
-    uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@aa759c845c83060e2473fd8df60f9f408e34675d # v1.2
+    uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@5e1ea380f75b02891de776dcc00e74ad7cfeca9c # v1.3
     with:
       sbom_name: ${{ github.event.release.tag_name || github.sha }}
diff --git a/.github/workflows/ssdlc-actions.yml b/.github/workflows/ssdlc-actions.yml
index 3afb20b..3d8976b 100644
--- a/.github/workflows/ssdlc-actions.yml
+++ b/.github/workflows/ssdlc-actions.yml
@@ -14,4 +14,4 @@ jobs:
   code-security-analysis:
     permissions:
       security-events: write # required for uploading code scanning alerts
-    uses: mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml@aa759c845c83060e2473fd8df60f9f408e34675d # v1.2
+    uses: mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml@5e1ea380f75b02891de776dcc00e74ad7cfeca9c # v1.3