diff --git a/.github/workflows/shared-ci-terraform.yml b/.github/workflows/shared-ci-terraform.yml
index 517b725..0a80597 100644
--- a/.github/workflows/shared-ci-terraform.yml
+++ b/.github/workflows/shared-ci-terraform.yml
@@ -161,13 +161,13 @@ jobs:
 
       - name: cache tflint plugins
         id: cache-plugins
-        uses: actions/cache@v4
+        uses: actions/cache@v3.4.0
         with:
           path: ${{ env.TFLINT_PLUGIN_DIR }}
           key: tflint-plugins-${{ env.TFLINT_CACHE_VER }}
 
       - name: tflint
-        uses: reviewdog/action-tflint@v1.22.0
+        uses: reviewdog/action-tflint@v1.24.0
         with:
           reporter: ${{ inputs.suggestions && 'github-pr-annotations' || 'local' }}
           fail_on_error: ${{ inputs.suggestions }}
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index f28daa7..d408940 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -50,7 +50,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Check spelling
-        uses: crate-ci/typos@v1.16.25
+        uses: crate-ci/typos@v1.28.3
         with:
           files: |
             .
@@ -105,13 +105,13 @@ jobs:
 
       # Install TFLint for pre-commit hook
       - name: TFLint cache plugin dir
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ~/.tflint.d/plugins
           key: ubuntu-latest-tflint-${{ hashFiles('.tflint.hcl') }}
 
       - name: Setup TFLint
-        uses: terraform-linters/setup-tflint@ba6bb2989f94daf58a4cc6eac2c1ca7398a678bf # v3
+        uses: terraform-linters/setup-tflint@a5a1af8c6551fb10c53f1cd4ba62359f1973746f # v3
         with:
           github_token: "${{ secrets.GITHUB_TOKEN }}"