diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 79554c94..de6ee596 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -31,7 +31,7 @@ jobs:
       actions: read
       contents: read
       security-events: write
-    uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml@9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7 # 9eb9e07
+    uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml@b5789d6bb6a1c1e64dfac7fb93bdfe06bce0b726 # 9eb9e07
     with:
       # Public repository: `pull_request` runs untrusted fork code. Name the
       # hosted runner explicitly — the reusable's default belongs to the pinned