diff --git a/action.yml b/action.yml
index e0dc2bb4..3516aed2 100644
--- a/action.yml
+++ b/action.yml
@@ -1007,7 +1007,7 @@ runs:
     # The validated sarif-file output remains available to the caller.
     - name: Upload SARIF
       if: steps.validate-inputs.outputs.sarif == 'true' && steps.generate-sarif.outputs.sarif-file != ''
-      uses: github/codeql-action/upload-sarif@03e4368ac7daa2bd82b3e85262f3bf87ee112f57 # v3.36.0
+      uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
       with:
         sarif_file: ${{ steps.generate-sarif.outputs.sarif-file }}
         category: ${{ steps.generate-sarif.outputs.sarif-category }}