diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4be18f0..79cd715 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -104,7 +104,7 @@ jobs:
     steps:
 
       - name: 'Harden Runner'
-        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f  # v2.3.0
+        uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969  # v2.4.0
         with:
           disable-sudo: true
           egress-policy: block
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index da6dcc2..1048a59 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -32,7 +32,7 @@ jobs:
     steps:
 
       - name: 'Harden Runner'
-        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f  # v2.3.0
+        uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969  # v2.4.0
         with:
           disable-sudo: true
           egress-policy: block
@@ -71,7 +71,7 @@ jobs:
     steps:
 
       - name: 'Harden Runner'
-        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f  # v2.3.0
+        uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969  # v2.4.0
         with:
           disable-sudo: true
           egress-policy: block