diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 4117c1be..d0158782 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -28,7 +28,7 @@ jobs:
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
 
       - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@868747438ea8f2c3701d0cf6fe59dcfebbdb06a2 # cargo-llvm-cov
+        uses: taiki-e/install-action@de04dd511fadcf816cfe55a9e61e688a64bb6b6d # cargo-llvm-cov
 
       - name: Run unit tests under coverage instrumentation
         run: cargo llvm-cov --no-report --all-features --lib --verbose
diff --git a/.github/workflows/mutants.yml b/.github/workflows/mutants.yml
index dc67577f..a691f227 100644
--- a/.github/workflows/mutants.yml
+++ b/.github/workflows/mutants.yml
@@ -31,7 +31,7 @@ jobs:
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
 
       - name: Install cargo-mutants
-        uses: taiki-e/install-action@d6a3a01e352ba651618b9c08e6830aa517914706 # cargo-mutants
+        uses: taiki-e/install-action@de04dd511fadcf816cfe55a9e61e688a64bb6b6d # cargo-mutants
 
       # Scoped to the parser/codec modules (highest payoff for catching
       # tests that run code without asserting on it). The full set currently