diff --git a/.github/workflows/anchore-analysis.yml b/.github/workflows/anchore-analysis.yml
index aafedc2..35fbea6 100644
--- a/.github/workflows/anchore-analysis.yml
+++ b/.github/workflows/anchore-analysis.yml
@@ -40,6 +40,6 @@ jobs:
         severity-cutoff: critical
         only-fixed: true
     - name: Upload Anchore Scan Report
-      uses: github/codeql-action/upload-sarif@v4
+      uses: github/codeql-action/upload-sarif@v4.37.3
       with:
         sarif_file: ${{ steps.scan.outputs.sarif }}