diff --git a/.github/workflows/security_scanning.yml b/.github/workflows/security_scanning.yml
index 40fd203..504bcf6 100644
--- a/.github/workflows/security_scanning.yml
+++ b/.github/workflows/security_scanning.yml
@@ -72,7 +72,7 @@ jobs:
         run: jq . ${{ steps.scan.outputs.sarif }}
 
       - name: Upload Anchore scan SARIF report
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}
           category: grype-${{ matrix.os }}-${{ matrix.platform }}