diff --git a/.github/workflows/veracode-analysis.yml b/.github/workflows/veracode-analysis.yml
index ad26f9ddfb..cc5150ed7a 100644
--- a/.github/workflows/veracode-analysis.yml
+++ b/.github/workflows/veracode-analysis.yml
@@ -387,7 +387,7 @@ jobs:
 
       - name: install PHP
         if: env.is_php_project == 'true'
-        uses: shivammathur/setup-php@2e947f1f6932d141d076ca441d0e1e881775e95b # v2.31.0
+        uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2.31.1
         with:
           php-version: ${{ env.php_version }}
           extensions: none
diff --git a/.github/workflows/web.yml b/.github/workflows/web.yml
index aca33e40a2..51a556c7d2 100644
--- a/.github/workflows/web.yml
+++ b/.github/workflows/web.yml
@@ -187,7 +187,7 @@ jobs:
       - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@6d7209f44a25a59e904b1ee9f3b0c33ab2cd888d # v2.29.0
+        uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2.31.1
         with:
           php-version: 8.2
         env: