diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml
index e0512f1..1be9461 100644
--- a/.github/workflows/sast.yml
+++ b/.github/workflows/sast.yml
@@ -28,7 +28,7 @@ jobs:
             p/secrets
           generateSarif: "1"
 
-      - uses: github/codeql-action/upload-sarif@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v3
+      - uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v3
         if: always() && github.ref == 'refs/heads/main'
         continue-on-error: true
         with: