diff --git a/.github/workflows/harden-gate.yml b/.github/workflows/harden-gate.yml
index d522d2c..d70205f 100644
--- a/.github/workflows/harden-gate.yml
+++ b/.github/workflows/harden-gate.yml
@@ -86,7 +86,7 @@ jobs:
       - name: Semgrep (report-only, SARIF)
         shell: bash
         run: |
-          pip install -q semgrep
+          python3 -m pip install -q semgrep || true
           semgrep scan --config auto --sarif --output semgrep.sarif || true
           test -f semgrep.sarif || echo '{"version":"2.1.0","runs":[]}' > semgrep.sarif
       - uses: github/codeql-action/upload-sarif@v3
diff --git a/.github/workflows/infrastructure-tests.yml b/.github/workflows/infrastructure-tests.yml
index 157a688..f78033a 100644
--- a/.github/workflows/infrastructure-tests.yml
+++ b/.github/workflows/infrastructure-tests.yml
@@ -337,7 +337,7 @@ jobs:
         docker system prune -f
 
     - name: Publish Test Results
-      uses: EnricoMi/publish-unit-test-result-action@v2
+      uses: EnricoMi/publish-unit-test-result-action/composite@v2
       if: always()
       with:
         files: |