diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 3f83279a0b..e4996bf89f 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -49,10 +49,10 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@883476649888a9e8e219d5b2e6b789dc024f690c # v1
+      uses: github/codeql-action/init@81bfc289f5947eca8a3358341c874cb4f4697b64 # v2.8.4
       with:
         languages: ${{ matrix.language }}
         config-file: .github/workflows/config/codeql.yml
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@883476649888a9e8e219d5b2e6b789dc024f690c # v1
+      uses: github/codeql-action/analyze@81bfc289f5947eca8a3358341c874cb4f4697b64 # v2.8.4
diff --git a/.github/workflows/config/codeql.yml b/.github/workflows/config/codeql.yml
index 304cc81950..9958e08263 100644
--- a/.github/workflows/config/codeql.yml
+++ b/.github/workflows/config/codeql.yml
@@ -1,4 +1,4 @@
 name: Fleet CodeQL
 
 paths-ignore:
-  - website/assets/dependencies/**
+  - website/assets/dependencies/