diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml
index 5841fe886b..3588292a70 100644
--- a/.github/workflows/ossf-scorecard.yml
+++ b/.github/workflows/ossf-scorecard.yml
@@ -16,6 +16,6 @@ jobs:
       contents: read # for actions/checkout
       id-token: write # for Scorecard to publish results
       security-events: write # for the SARIF upload to code scanning
-    uses: open-telemetry/shared-workflows/.github/workflows/scorecard.yml@30362d425ab746bb2ec4647538ea9154591cce91 # v0.22.0
+    uses: open-telemetry/shared-workflows/.github/workflows/scorecard.yml@f09a36e1fa2576787fe05cbc1313ef6066918c78 # v0.23.0
     with:
       use-harden-runner: true
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 9c75065795..8abbf1885e 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -15,4 +15,4 @@ jobs:
     permissions:
       contents: read # for actions/checkout
       security-events: write # for zizmor to upload SARIF results
-    uses: open-telemetry/shared-workflows/.github/workflows/zizmor.yml@30362d425ab746bb2ec4647538ea9154591cce91 # v0.22.0
+    uses: open-telemetry/shared-workflows/.github/workflows/zizmor.yml@f09a36e1fa2576787fe05cbc1313ef6066918c78 # v0.23.0
diff --git a/functional/otlp/Dockerfile b/functional/otlp/Dockerfile
index e80682c52f..621186a85e 100644
--- a/functional/otlp/Dockerfile
+++ b/functional/otlp/Dockerfile
@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-FROM otel/opentelemetry-collector:0.162.0@sha256:6ad380c4e403192e0be16f661c58af95d89b623dab48e6972da7c6061ad465db
+FROM otel/opentelemetry-collector:0.163.1@sha256:b3bd84db789cec2e6839e1bc3b99d8d07c69fd0b3e61cc6d77ca4e90453beabf
 COPY . .
 CMD ["--config", "/otel-cpp/otel-config.yaml"]
 EXPOSE 4317