diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 68ae858..a0e5f89 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: 'Harden Runner'
-        uses: 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1' # v2.21.1
+        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
         with:
           egress-policy: 'audit'
 
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index e9a12c1..723d9d5 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
+        uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/lf-build-linux-x86_64.yml b/.github/workflows/lf-build-linux-x86_64.yml
index 7950829..562f017 100644
--- a/.github/workflows/lf-build-linux-x86_64.yml
+++ b/.github/workflows/lf-build-linux-x86_64.yml
@@ -39,7 +39,7 @@ jobs:
       distro_list: '${{ steps.set-matrix.outputs.distro_list }}'
     steps:
       - name: 'Harden the runner (Audit all outbound calls)'
-        uses: 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1' # v2.21.1
+        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
         with:
           egress-policy: 'audit'
 
@@ -72,7 +72,7 @@ jobs:
         distro: '${{ fromJson(needs.prepare-matrix.outputs.distro_list) }}'
     steps:
       - name: 'Harden the runner (Audit all outbound calls)'
-        uses: 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1' # v2.21.1
+        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
         with:
           egress-policy: 'audit'
 
diff --git a/.github/workflows/lf-check-upstream.yml b/.github/workflows/lf-check-upstream.yml
index ac2ebae..aecb966 100644
--- a/.github/workflows/lf-check-upstream.yml
+++ b/.github/workflows/lf-check-upstream.yml
@@ -18,7 +18,7 @@ jobs:
       pull-requests: 'write'
     steps:
       - name: 'Harden the runner (Audit all outbound calls)'
-        uses: 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1' # v2.21.1
+        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
         with:
           egress-policy: 'audit'
 
diff --git a/.github/workflows/lf-pre-commit.yml b/.github/workflows/lf-pre-commit.yml
index fb7c4bf..c18d429 100644
--- a/.github/workflows/lf-pre-commit.yml
+++ b/.github/workflows/lf-pre-commit.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: 'ubuntu-latest'
     steps:
       - name: 'Harden the runner (Audit all outbound calls)'
-        uses: 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1' # v2.21.1
+        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
         with:
           egress-policy: 'audit'
 
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index ba348c9..1de9b30 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
+        uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0
         with:
           egress-policy: audit