diff --git a/action.yml b/action.yml
index a569e78..123ba85 100644
--- a/action.yml
+++ b/action.yml
@@ -240,7 +240,7 @@ runs:
     - name: "Upload SARIF to GitHub code scanning"
       id: sarif-upload
       if: inputs.upload-sarif == 'true' && steps.sarif-path.outputs.exists == 'true'
-      uses: github/codeql-action/upload-sarif@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3.36.2
+      uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
       with:
         sarif_file: ${{ steps.sarif-path.outputs.sarif }}
         category: ${{ inputs.category }}