diff --git a/.github/workflows/scan-images.yml b/.github/workflows/scan-images.yml
index 7b2fdb6..2c3074c 100644
--- a/.github/workflows/scan-images.yml
+++ b/.github/workflows/scan-images.yml
@@ -61,7 +61,7 @@ jobs:
 
       - name: Upload SARIF
         if: success() || failure()
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.3
         with:
           sarif_file: trivy-${{ steps.meta.outputs.safe }}.sarif
           category: trivy-${{ matrix.image }}