diff --git a/.github/workflows/security-deps.yml b/.github/workflows/security-deps.yml
index 8b203abc..ba8a1d22 100644
--- a/.github/workflows/security-deps.yml
+++ b/.github/workflows/security-deps.yml
@@ -72,7 +72,7 @@ jobs:
 
       - name: Upload osv SARIF
         if: always()
-        uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4
+        uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4
         with:
           sarif_file: osv-results.sarif
           category: osv-scanner
diff --git a/.github/workflows/security-sast.yml b/.github/workflows/security-sast.yml
index 86986d22..0d26b20b 100644
--- a/.github/workflows/security-sast.yml
+++ b/.github/workflows/security-sast.yml
@@ -80,7 +80,7 @@ jobs:
 
       - name: Upload semgrep SARIF
         if: always()
-        uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4
+        uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4
         with:
           sarif_file: semgrep-results.sarif
           category: semgrep
diff --git a/.github/workflows/security-secrets.yml b/.github/workflows/security-secrets.yml
index 3f0ad9b7..f60447a0 100644
--- a/.github/workflows/security-secrets.yml
+++ b/.github/workflows/security-secrets.yml
@@ -77,7 +77,7 @@ jobs:
 
       - name: Upload SARIF
         if: always()
-        uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4
+        uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4
         with:
           sarif_file: gitleaks-results.sarif
           category: gitleaks