diff --git a/.github/actions/lockfile-diff/action.yml b/.github/actions/lockfile-diff/action.yml
index e94e54277..a2ffd6db5 100644
--- a/.github/actions/lockfile-diff/action.yml
+++ b/.github/actions/lockfile-diff/action.yml
@@ -112,7 +112,7 @@ runs:
         echo "has_downgrade=$HAS_DOWNGRADE" >> "$GITHUB_OUTPUT"
 
     - name: Post sticky PR comment
-      uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
+      uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
       with:
         header: lockfile-diff
         GITHUB_TOKEN: ${{ inputs.token }}
diff --git a/.github/workflows/Gitleaks.yml b/.github/workflows/Gitleaks.yml
index 2dcf72b9e..7e301d1b9 100644
--- a/.github/workflows/Gitleaks.yml
+++ b/.github/workflows/Gitleaks.yml
@@ -65,14 +65,14 @@ jobs:
 
       - name: Post PR comment
         if: steps.gitleaks.outcome == 'failure' && github.event_name == 'pull_request'
-        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
+        uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
         with:
           header: gitleaks
           path: gitleaks-comment.md
 
       - name: Delete PR comment if clean
         if: steps.gitleaks.outcome == 'success' && github.event_name == 'pull_request'
-        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
+        uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
         with:
           header: gitleaks
           delete: true
diff --git a/scaffold/github/actions/common/lockfile-diff/action.yml b/scaffold/github/actions/common/lockfile-diff/action.yml
index e94e54277..a2ffd6db5 100644
--- a/scaffold/github/actions/common/lockfile-diff/action.yml
+++ b/scaffold/github/actions/common/lockfile-diff/action.yml
@@ -112,7 +112,7 @@ runs:
         echo "has_downgrade=$HAS_DOWNGRADE" >> "$GITHUB_OUTPUT"
 
     - name: Post sticky PR comment
-      uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
+      uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
       with:
         header: lockfile-diff
         GITHUB_TOKEN: ${{ inputs.token }}