diff --git a/action.yml b/action.yml
index a2be7e0..477a8b5 100644
--- a/action.yml
+++ b/action.yml
@@ -63,7 +63,7 @@ runs:
 
     - name: Upload SARIF
       if: ${{ always() && inputs.format == 'sarif' }}
-      uses: github/codeql-action/upload-sarif@v3
+      uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
       with:
         sarif_file: results.sarif