diff --git a/.github/workflows/ci-scan.yml b/.github/workflows/ci-scan.yml
index 75e432e..3d64801 100644
--- a/.github/workflows/ci-scan.yml
+++ b/.github/workflows/ci-scan.yml
@@ -23,7 +23,7 @@ jobs:
           submodules: recursive
           fetch-depth: 0
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
       - name: Install lint tooling
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f92a355..36afc54 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.11"
 
diff --git a/.github/workflows/redteam.yml b/.github/workflows/redteam.yml
index 8d216dd..f1ca0ef 100644
--- a/.github/workflows/redteam.yml
+++ b/.github/workflows/redteam.yml
@@ -18,7 +18,7 @@ jobs:
           submodules: recursive
           fetch-depth: 0
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
       - name: Run adversarial / security stress suite
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 70a798c..a8afd43 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,7 +23,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.11"
 
diff --git a/.github/workflows/secops.yml b/.github/workflows/secops.yml
index 6269721..c778835 100644
--- a/.github/workflows/secops.yml
+++ b/.github/workflows/secops.yml
@@ -23,7 +23,7 @@ jobs:
           submodules: recursive
           fetch-depth: 0
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
       - name: Install Bandit