diff --git a/.github/actions/scan-image/action.yaml b/.github/actions/scan-image/action.yaml
index bc07264..663eaf1 100644
--- a/.github/actions/scan-image/action.yaml
+++ b/.github/actions/scan-image/action.yaml
@@ -78,7 +78,7 @@ runs:
         mv "$tmpfile" "cve-report-${{ inputs.image-name }}-${{ inputs.arch }}.json"
 
     - name: Upload Grype SARIF
-      uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+      uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
       with:
         sarif_file: ${{ steps.grype-sarif.outputs.sarif }}
         category: grype-${{ inputs.image-name }}-${{ inputs.arch }}
@@ -91,7 +91,7 @@ runs:
         output: trivy-results-${{ inputs.image-name }}-${{ inputs.arch }}.sarif
 
     - name: Upload Trivy SARIF
-      uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+      uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
       with:
         sarif_file: trivy-results-${{ inputs.image-name }}-${{ inputs.arch }}.sarif
         category: trivy-${{ inputs.image-name }}-${{ inputs.arch }}