diff --git a/.github/workflows/code-scanning.yaml b/.github/workflows/code-scanning.yaml
index 73ae77dfbf..07bd02c6fe 100644
--- a/.github/workflows/code-scanning.yaml
+++ b/.github/workflows/code-scanning.yaml
@@ -158,6 +158,6 @@ jobs:
 
       - name: Upload ShellCheck SARIF
         if: steps.shell-files.outputs.has_files == 'true' && steps.sarif-runs.outputs.has_runs == 'true'
-        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+        uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
         with:
           sarif_file: shellcheck.sarif