diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 53b98f8..4d1c9a9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -160,6 +160,6 @@ jobs:
         with:
           args: '-fmt sarif -out gosec-results.sarif ./core/...'
       - name: Upload SARIF to code-scanning
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f  # v3.28.1
+        uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a  # v3.28.1
         with:
           sarif_file: gosec-results.sarif
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 67b5f73..393ca91 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -94,7 +94,7 @@ jobs:
 
       - name: Upload Trivy SARIF
         if: always()
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f  # v3.28.1
+        uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a  # v3.28.1
         with:
           sarif_file: trivy-results.sarif
           category: trivy-container
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 979884f..01e5180 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -37,6 +37,6 @@ jobs:
           retention-days: 5
 
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f  # v3.28.1
+        uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a  # v3.28.1
         with:
           sarif_file: results.sarif