diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b69801d..8bfdae7 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -57,7 +57,7 @@ jobs:
         if: matrix.language == 'swift'
         run: xcodebuild -project app/MacScope.xcodeproj -scheme MacScope -configuration Debug -destination 'platform=macOS,arch=x86_64' -derivedDataPath "$RUNNER_TEMP/macscope-codeql" ARCHS=x86_64 ONLY_ACTIVE_ARCH=YES SWIFT_ENABLE_EXPLICIT_MODULES=NO SWIFT_USE_INTEGRATED_DRIVER=NO COMPILATION_CACHE_ENABLE_CACHING=NO SWIFT_ENABLE_COMPILE_CACHE=NO CODE_SIGNING_REQUIRED=NO CODE_SIGNING_ALLOWED=NO build
       - name: Analyze without a security write token
-        uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4
+        uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4
         with:
           category: /language:${{ matrix.language }}
           output: ${{ runner.temp }}/codeql-results