diff --git a/.github/workflows/dependency-determinism.yml b/.github/workflows/dependency-determinism.yml
index 14969cb..10dc3bd 100644
--- a/.github/workflows/dependency-determinism.yml
+++ b/.github/workflows/dependency-determinism.yml
@@ -22,7 +22,7 @@ jobs:
           mode: advisory
           sarif: true
           remote-validation: true
-      - uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
+      - uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a
         if: always() && steps.deterministic-deps.outputs.sarif-path != ''
         with:
           sarif_file: ${{ steps.deterministic-deps.outputs.sarif-path }}
diff --git a/action.yml b/action.yml
index 2aec7da..a9f7ef5 100644
--- a/action.yml
+++ b/action.yml
@@ -101,7 +101,7 @@ runs:
 
     - name: Upload AuthMap SARIF
       if: ${{ always() && inputs.upload-sarif == 'true' && steps.run-authmap.outputs.sarif-path != '' && (steps.run-authmap.outputs.exit-code == '0' || steps.run-authmap.outputs.exit-code == '20') }}
-      uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
+      uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a
       with:
         sarif_file: ${{ steps.run-authmap.outputs.sarif-path }}
         category: ${{ inputs.sarif-category }}