diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 01981a8..8fca15e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,7 +48,7 @@ jobs:
             | clippy-sarif | tee rust-clippy-results.sarif | sarif-fmt
       - name: Upload Clippy SARIF
         if: always() && hashFiles('rust-clippy-results.sarif') != ''
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           sarif_file: rust-clippy-results.sarif
           wait-for-processing: true
@@ -60,7 +60,7 @@ jobs:
         continue-on-error: true
       - name: Upload OSSAR SARIF
         if: always() && steps.ossar.outputs.sarifFile != ''
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           sarif_file: ${{ steps.ossar.outputs.sarifFile }}
           wait-for-processing: true
@@ -77,7 +77,7 @@ jobs:
           path: scorecard-results.sarif
           retention-days: 5
       - name: Upload Scorecard SARIF
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           sarif_file: scorecard-results.sarif
           wait-for-processing: true
@@ -123,7 +123,7 @@ jobs:
         run: pnpm run lint:sarif
       - name: Upload ESLint SARIF
         if: always() && hashFiles('eslint-results.sarif') != ''
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           sarif_file: eslint-results.sarif
           wait-for-processing: true