diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index c0a94b4d..069ed47b 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -51,7 +51,7 @@ jobs:
         run: (pnpm audit --production --json > audit-results.json) || echo '{}' > audit-results.json
 
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.95.9
+        uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # v3.97.1
         with:
           extra_args: --only-verified
 
diff --git a/.github/workflows/typos.yml b/.github/workflows/typos.yml
index b6a9d780..39e12fa1 100644
--- a/.github/workflows/typos.yml
+++ b/.github/workflows/typos.yml
@@ -32,4 +32,4 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Check spelling
-        uses: crate-ci/typos@bee27e3a4fd1ea2111cf90ab89cd076c870fce14 # v1.48.0
+        uses: crate-ci/typos@4d9c206a77c041268485162b8e2579ad7a5cb9a3 # v1.50.0