diff --git a/.github/workflows/score.yaml b/.github/workflows/score.yaml
index f389e3a..eb746b7 100644
--- a/.github/workflows/score.yaml
+++ b/.github/workflows/score.yaml
@@ -31,6 +31,6 @@ jobs:
           path: results.sarif
           retention-days: 5
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@6ca1aa8c195c3ca3e77c174fe0356db1bce3b319  # v2.21.1
+        uses: github/codeql-action/upload-sarif@5b6282e01c62d02e720b81eb8a51204f527c3624  # v2.21.3
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 8dab965..ef23175 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -76,7 +76,7 @@ jobs:
       with:
         flags: unittests  # optional
     - name: Upload Report
-      uses: github/codeql-action/upload-sarif@6ca1aa8c195c3ca3e77c174fe0356db1bce3b319  # v2.11.6
+      uses: github/codeql-action/upload-sarif@5b6282e01c62d02e720b81eb8a51204f527c3624  # v2.11.6
       with:
         sarif_file: 'trivy-results.sarif'
     - name: Run Integration Tests