diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json
index 9326fe7c8f..a6bd5ce3a4 100644
--- a/.github/aw/actions-lock.json
+++ b/.github/aw/actions-lock.json
@@ -3,7 +3,7 @@
     "actions/ai-inference@v2": {
       "repo": "actions/ai-inference",
       "version": "v2",
-      "sha": "334892bb203895caaed82ec52d23c1ed9385151e"
+      "sha": "a6101c89c6feaecc585efdd8d461f18bb7896f20"
     },
     "actions/attest-build-provenance@v2": {
       "repo": "actions/attest-build-provenance",
@@ -113,7 +113,7 @@
     "anchore/sbom-action@v0": {
       "repo": "anchore/sbom-action",
       "version": "v0",
-      "sha": "0b82b0b1a22399a1c542d4d656f70cd903571b5c"
+      "sha": "62ad5284b8ced813296287a0b63906cb364b73ee"
     },
     "anchore/sbom-action@v0.20.10": {
       "repo": "anchore/sbom-action",
diff --git a/.github/workflows/issue-classifier.lock.yml b/.github/workflows/issue-classifier.lock.yml
index be5da9f1c1..0a39a479e9 100644
--- a/.github/workflows/issue-classifier.lock.yml
+++ b/.github/workflows/issue-classifier.lock.yml
@@ -625,7 +625,7 @@ jobs:
           GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
         run: bash /opt/gh-aw/actions/print_prompt_summary.sh
       - name: Run AI Inference
-        uses: actions/ai-inference@334892bb203895caaed82ec52d23c1ed9385151e # v2
+        uses: actions/ai-inference@a6101c89c6feaecc585efdd8d461f18bb7896f20 # v2
         env:
           GH_AW_MCP_CONFIG: /tmp/gh-aw/mcp-config/mcp-servers.json
           GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
@@ -930,7 +930,7 @@ jobs:
           mkdir -p /tmp/gh-aw/threat-detection
           touch /tmp/gh-aw/threat-detection/detection.log
       - name: Run AI Inference
-        uses: actions/ai-inference@334892bb203895caaed82ec52d23c1ed9385151e # v2
+        uses: actions/ai-inference@a6101c89c6feaecc585efdd8d461f18bb7896f20 # v2
         env:
           GH_AW_MCP_CONFIG: /tmp/gh-aw/mcp-config/mcp-servers.json
           GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
diff --git a/.github/workflows/release.lock.yml b/.github/workflows/release.lock.yml
index 586f56de49..76922d0fde 100644
--- a/.github/workflows/release.lock.yml
+++ b/.github/workflows/release.lock.yml
@@ -1347,13 +1347,13 @@ jobs:
       - name: Download Go modules
         run: go mod download
       - name: Generate SBOM (SPDX format)
-        uses: anchore/sbom-action@0b82b0b1a22399a1c542d4d656f70cd903571b5c # v0
+        uses: anchore/sbom-action@62ad5284b8ced813296287a0b63906cb364b73ee # v0
         with:
           artifact-name: sbom.spdx.json
           format: spdx-json
           output-file: sbom.spdx.json
       - name: Generate SBOM (CycloneDX format)
-        uses: anchore/sbom-action@0b82b0b1a22399a1c542d4d656f70cd903571b5c # v0
+        uses: anchore/sbom-action@62ad5284b8ced813296287a0b63906cb364b73ee # v0
         with:
           artifact-name: sbom.cdx.json
           format: cyclonedx-json
diff --git a/pkg/workflow/data/action_pins.json b/pkg/workflow/data/action_pins.json
index 9326fe7c8f..a6bd5ce3a4 100644
--- a/pkg/workflow/data/action_pins.json
+++ b/pkg/workflow/data/action_pins.json
@@ -3,7 +3,7 @@
     "actions/ai-inference@v2": {
       "repo": "actions/ai-inference",
       "version": "v2",
-      "sha": "334892bb203895caaed82ec52d23c1ed9385151e"
+      "sha": "a6101c89c6feaecc585efdd8d461f18bb7896f20"
     },
     "actions/attest-build-provenance@v2": {
       "repo": "actions/attest-build-provenance",
@@ -113,7 +113,7 @@
     "anchore/sbom-action@v0": {
       "repo": "anchore/sbom-action",
       "version": "v0",
-      "sha": "0b82b0b1a22399a1c542d4d656f70cd903571b5c"
+      "sha": "62ad5284b8ced813296287a0b63906cb364b73ee"
     },
     "anchore/sbom-action@v0.20.10": {
       "repo": "anchore/sbom-action",