diff --git a/.github/workflows/dependabot-alerts.yml b/.github/workflows/dependabot-alerts.yml
index bf301e79..b8c7b6e3 100644
--- a/.github/workflows/dependabot-alerts.yml
+++ b/.github/workflows/dependabot-alerts.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # X.X.X - Latest version available at: https://github.com/kunalnagarco/action-cve/releases
-      - uses: kunalnagarco/action-cve@v1.12.36
+      - uses: kunalnagarco/action-cve@v1.17.3
         with:
           token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
           slack_webhook: ${{ secrets.SLACK_WEBHOOK }}
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index f58d47b6..6532a72a 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -15,7 +15,7 @@ jobs:
       MAYHEM_TOKEN: ${{ secrets.MAYHEM_TOKEN }}
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           # fetch entire history to compute diffs between jobs
           fetch-depth: 0
@@ -28,7 +28,7 @@ jobs:
     # make sure the action works on a clean machine without building
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           # fetch entire history to compute diffs between jobs
           fetch-depth: 0
@@ -44,7 +44,7 @@ jobs:
           args: --image forallsecure/lighttpd:vulnerable --duration 60
 
       - name: Upload SARIF file(s)
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: out/sarif
 
@@ -57,7 +57,7 @@ jobs:
     # make sure the action works on a clean machine without building
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           # fetch entire history to compute diffs between jobs
           fetch-depth: 0
@@ -75,21 +75,21 @@ jobs:
           args: --image forallsecure/lighttpd:vulnerable --duration 60
 
       - name: Archive Coverage report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: coverage-report
           path: out/coverage/
           if-no-files-found: error
 
       - name: Archive JUnit results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: mcode-junit
           path: out/junit/
           if-no-files-found: error
 
       - name: Upload SARIF file(s)
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: out/sarif
 
@@ -102,7 +102,7 @@ jobs:
     # make sure the action works on a clean machine without building
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           # fetch entire history to compute diffs between jobs
           fetch-depth: 0
@@ -125,7 +125,7 @@ jobs:
   test-override-inputs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           # fetch entire history to compute diffs between jobs
           fetch-depth: 0
@@ -154,7 +154,7 @@ jobs:
     # make sure the action works on a clean machine without building
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           # fetch entire history to compute diffs between jobs
           fetch-depth: 0