diff --git a/.github/workflows/codecoverage-main.yml b/.github/workflows/codecoverage-main.yml
index a7bf4228..a7f3a657 100644
--- a/.github/workflows/codecoverage-main.yml
+++ b/.github/workflows/codecoverage-main.yml
@@ -71,7 +71,7 @@ jobs:
                   path: gh-pages
 
             - name: Install PHP
-              uses: shivammathur/setup-php@ccf2c627fe61b1b4d924adfcbd19d661a18133a0 # v2.35.2
+              uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f # v2.35.5
               with:
                   php-version: ${{ matrix.php }}
                   coverage: xdebug
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 5bbc0cfd..7f3fe019 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -26,7 +26,7 @@ jobs:
 
       # User PHP 7.4 here for compatibility with the WordPress codesniffer rules.
       - name: Setup PHP
-        uses: shivammathur/setup-php@ccf2c627fe61b1b4d924adfcbd19d661a18133a0 # v2.35.2
+        uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f # v2.35.5
         with:
           php-version: '7.3'
           coverage: none