diff --git a/.github/workflows/control-tests.yml b/.github/workflows/control-tests.yml
index 8b8434d..56901ea 100644
--- a/.github/workflows/control-tests.yml
+++ b/.github/workflows/control-tests.yml
@@ -55,7 +55,7 @@ jobs:
         # containers; needs only Docker and the public Chainguard wolfi-base image.
         run: bash test/tools/cinc_require_target_running_test.sh
 
-      - uses: ruby/setup-ruby@89f90524b88a01fe6e0b732220432cc6142926af # v1.313.0
+      - uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
         with:
           working-directory: test
           bundler-cache: true
diff --git a/.github/workflows/scan-smoke.yml b/.github/workflows/scan-smoke.yml
index 36c681f..69f9049 100644
--- a/.github/workflows/scan-smoke.yml
+++ b/.github/workflows/scan-smoke.yml
@@ -100,7 +100,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ruby/setup-ruby@89f90524b88a01fe6e0b732220432cc6142926af # v1.313.0
+      - uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
         with:
           working-directory: test
           bundler-cache: true