diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index 9aa4601bb..e646c8b5d 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -37,6 +37,6 @@ jobs:
       # Note: Coverage is handled separately by ci.yml; this workflow focuses on static analysis
       - name: SonarCloud Scan
         if: env.SONAR_TOKEN != ''
-        uses: SonarSource/sonarqube-scan-action@ba9859eae8dd6bd29e412f25ddbbef3d032000f4 # v7
+        uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v7
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}