diff --git a/.github/workflows/multi-build.yml b/.github/workflows/multi-build.yml
index 72cd6a1..dc6a560 100644
--- a/.github/workflows/multi-build.yml
+++ b/.github/workflows/multi-build.yml
@@ -322,6 +322,6 @@ jobs:
           format: 'sarif'
           output: 'trivy-results.sarif'
       - name: Upload scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4
+        uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4
         with:
           sarif_file: 'trivy-results.sarif'
diff --git a/.github/workflows/security-msdo-defender.yml b/.github/workflows/security-msdo-defender.yml
index e78d7de..85503b7 100644
--- a/.github/workflows/security-msdo-defender.yml
+++ b/.github/workflows/security-msdo-defender.yml
@@ -47,6 +47,6 @@ jobs:
 
       - name: Upload SARIF to GitHub Code Scanning
         if: always()
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4
+        uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4
         with:
           sarif_file: ${{ env.MSDO_SARIF_FILE }}