diff --git a/.github/workflows/reusable-sast-codeql.yml b/.github/workflows/reusable-sast-codeql.yml
index e69c7bd..f27a385 100644
--- a/.github/workflows/reusable-sast-codeql.yml
+++ b/.github/workflows/reusable-sast-codeql.yml
@@ -79,7 +79,7 @@ jobs:
           queries: ${{ inputs.queries }}
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
+        uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
         with:
           category: '/language:${{ inputs.languages }}'
           # Write SARIF to a directory in addition to the code-scanning upload,