diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d28bd93..27e72a5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -794,7 +794,7 @@ jobs:
 
       - name: Upload trivy scan results to GitHub Security tab
         if: ${{ env.TRIVY == '1' && always() && env.GITHUB_ADVANCED_SECURITY == '1' }}
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: 'trivy-results.sarif'
           category: trivy
@@ -818,7 +818,7 @@ jobs:
 
       - name: Upload grype scan results to GitHub Security tab
         if: ${{ env.GRYPE == '1' && always() && env.GITHUB_ADVANCED_SECURITY == '1' }}
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: ${{ steps.scan-grype.outputs.sarif }}
           category: grype
@@ -1395,7 +1395,7 @@ jobs:
 
       - name: Upload Trivy scan results to GitHub Security tab
         if: ${{ env.TRIVY == '1' && always() && env.GITHUB_ADVANCED_SECURITY == '1' }}
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         # Requires GitHub Advanced Security
         # https://docs.github.com/en/get-started/learning-about-github/about-github-advanced-security
         # https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning
@@ -1423,7 +1423,7 @@ jobs:
 
       - name: Upload Grype scan results to GitHub Security tab
         if: ${{ env.GRYPE == '1' && always() && env.GITHUB_ADVANCED_SECURITY == '1' }}
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: ${{ steps.scan-grype.outputs.sarif }}
           category: grype
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index f623dfc..0f363f7 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -469,7 +469,7 @@ jobs:
 
       - name: Upload Trivy scan results to GitHub Security tab
         if: ${{ env.TRIVY == '1' && always() && env.GITHUB_ADVANCED_SECURITY == '1' }}
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         # Requires GitHub Advanced Security
         # https://docs.github.com/en/get-started/learning-about-github/about-github-advanced-security
         # https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning
@@ -497,7 +497,7 @@ jobs:
 
       - name: Upload Grype scan results to GitHub Security tab
         if: ${{ env.GRYPE == '1' && always() && env.GITHUB_ADVANCED_SECURITY == '1' }}
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: ${{ steps.scan-grype.outputs.sarif }}
           category: grype