diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a9b2f87..50b230f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -176,7 +176,7 @@ jobs:
           sarif-file: sarif.output.json
           summary: false
       - name: Upload SARIF result
-        uses: github/codeql-action/upload-sarif@c73d8a69e18598d5de9d6bf5de3a374253cde261
+        uses: github/codeql-action/upload-sarif@ab6dd28b80aac8498cf0d7d3b1335aaea9015b53
         id: upload-sarif
         if: steps.docker-scout-cves.outcome == 'success'
         with: