diff --git a/.github/workflows/k8s_e2e.yml b/.github/workflows/k8s_e2e.yml
index 43c245e44405d..4a41badc8da69 100644
--- a/.github/workflows/k8s_e2e.yml
+++ b/.github/workflows/k8s_e2e.yml
@@ -90,7 +90,7 @@ jobs:
         || contains(github.event.pull_request.labels.*.name, 'ci-condition: k8s e2e tests enable')
         || contains(github.event.pull_request.labels.*.name, 'ci-condition: k8s e2e all targets')
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@v6.3.3
         id: set-matrix
         with:
           script: |
diff --git a/.github/workflows/manual_soak.yml b/.github/workflows/manual_soak.yml
index 6f2cd2f945c6f..1b1b9b244aa6a 100644
--- a/.github/workflows/manual_soak.yml
+++ b/.github/workflows/manual_soak.yml
@@ -116,7 +116,7 @@ jobs:
       - name: Check out the repo
         uses: actions/checkout@v3
 
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@v6.3.3
         id: set-matrix
         with:
           script: |
diff --git a/.github/workflows/soak.yml b/.github/workflows/soak.yml
index 342d0d51dc69c..247eedc40dc1e 100644
--- a/.github/workflows/soak.yml
+++ b/.github/workflows/soak.yml
@@ -144,7 +144,7 @@ jobs:
       - name: Check out the repo
         uses: actions/checkout@v3
 
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@v6.3.3
         id: set-matrix
         with:
           script: |
diff --git a/.github/workflows/soak_comment.yml b/.github/workflows/soak_comment.yml
index f4ebd2f890ba1..01cac7b339725 100644
--- a/.github/workflows/soak_comment.yml
+++ b/.github/workflows/soak_comment.yml
@@ -18,7 +18,7 @@ jobs:
       github.event.workflow_run.conclusion == 'success' }}
     steps:
       - name: 'Output job parameters'
-        uses: actions/github-script@v3.1.0
+        uses: actions/github-script@v6.3.3
         with:
           script: |
             console.log("::group::github.event");
@@ -30,7 +30,7 @@ jobs:
             console.log("::endgroup::");
 
       - name: 'Download PR number'
-        uses: actions/github-script@v3.1.0
+        uses: actions/github-script@v6.3.3
         with:
           script: |
             console.log("Fetching artifacts for run %s of %s/%s", "${{github.event.workflow_run.id }}", context.repo.owner, context.repo.repo);
@@ -68,7 +68,7 @@ jobs:
           path: /tmp/pr.txt
 
       - name: 'Download soak analysis'
-        uses: actions/github-script@v3.1.0
+        uses: actions/github-script@v6.3.3
         with:
           script: |
             console.log("Fetching artifacts for run %s of %s/%s", "${{github.event.workflow_run.id }}", context.repo.owner, context.repo.repo);
diff --git a/.github/workflows/test-harness.yml b/.github/workflows/test-harness.yml
index f8a224f46df9d..701c24fabc1d4 100644
--- a/.github/workflows/test-harness.yml
+++ b/.github/workflows/test-harness.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
     - name: Indicate that we picked up the command with a comment reaction
-      uses: actions/github-script@v6
+      uses: actions/github-script@v6.3.3
       with:
         github-token: '${{secrets.GITHUB_TOKEN}}'
         script: |
@@ -38,7 +38,7 @@ jobs:
 
     - name: Get Pull Request info
       id: pr-info
-      uses: actions/github-script@v6
+      uses: actions/github-script@v6.3.3
       with:
         script: |
           const pr_info_response = await github.pulls.get({
@@ -111,7 +111,7 @@ jobs:
         AWS_DEFAULT_REGION: '${{ secrets.TEST_HARNESS_AWS_DEFAULT_REGION }}'
 
     - name: Post a comment with the results
-      uses: actions/github-script@v6
+      uses: actions/github-script@v6.3.3
       with:
         github-token: '${{secrets.GITHUB_TOKEN}}'
         script: |