diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml
index 4b7b094a3c..18e189bfb1 100644
--- a/.github/workflows/image.yml
+++ b/.github/workflows/image.yml
@@ -107,7 +107,7 @@ jobs:
           push-to-registry: ${{ inputs.pushImage }}
 
       - name: Generate SBOM
-        uses: anchore/sbom-action@v0.17.7
+        uses: anchore/sbom-action@v0.17.8
         with:
           image: quay.io/sustainable_computing_io/${{matrix.IMAGE_NAME}}:${{matrix.LABEL}}
           artifact-name: sbom-${{matrix.IMAGE_NAME}}-${{matrix.LABEL}}.json
diff --git a/.github/workflows/mock_acpi.yml b/.github/workflows/mock_acpi.yml
index f267390dcc..f5d446aa29 100644
--- a/.github/workflows/mock_acpi.yml
+++ b/.github/workflows/mock_acpi.yml
@@ -17,7 +17,7 @@ jobs:
       # we need to get the branch of the pull request
       - name: Get PR branch
         id: pr_branch
-        uses: xt0rted/pull-request-comment-branch@v2
+        uses: xt0rted/pull-request-comment-branch@v3
       # Since `issue_comment` event workflow will not appear on the
       # pull request page, we need to set the status of the job
       # in order to attach it to the pull request itself
diff --git a/.github/workflows/unit_test.yml b/.github/workflows/unit_test.yml
index 42fbca70f9..6e0cdf3c47 100644
--- a/.github/workflows/unit_test.yml
+++ b/.github/workflows/unit_test.yml
@@ -40,7 +40,7 @@ jobs:
 
       - name: Upload coverage reports to Codecov
         if: github.event_name != 'pull_request'
-        uses: codecov/codecov-action@v5.0.2
+        uses: codecov/codecov-action@v5.0.7
         with:
           fail_ci_if_error: false # because codecov updates occasionally fail
           files: coverage.out