diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d968bb6..9dd1ab2 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,7 +28,7 @@ jobs:
           dotnet-version: 10.0.x
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: csharp
           # 查询套件: default / security-extended / security-and-quality
@@ -42,6 +42,6 @@ jobs:
         run: dotnet build WebApplicationTestWeb.slnx -c Release --no-restore
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: "/language:csharp"
diff --git a/.github/workflows/security-scans.yml b/.github/workflows/security-scans.yml
index cfaa80b..b582899 100644
--- a/.github/workflows/security-scans.yml
+++ b/.github/workflows/security-scans.yml
@@ -1,4 +1,4 @@
-name: DevSkim security lint
+name: DevSkim security lint
 
 on:
   push:
@@ -24,6 +24,6 @@ jobs:
           directory-to-scan: .
 
       - name: Upload DevSkim SARIF
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: devskim.sarif