diff --git a/action.yml b/action.yml
index a569e78..47c88b4 100644
--- a/action.yml
+++ b/action.yml
@@ -240,7 +240,7 @@ runs:
     - name: "Upload SARIF to GitHub code scanning"
       id: sarif-upload
       if: inputs.upload-sarif == 'true' && steps.sarif-path.outputs.exists == 'true'
-      uses: github/codeql-action/upload-sarif@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3.36.2
+      uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
       with:
         sarif_file: ${{ steps.sarif-path.outputs.sarif }}
         category: ${{ inputs.category }}