diff --git a/.github/workflows/checkov.yml b/.github/workflows/checkov.yml
index 266ffb54..e46746b1 100644
--- a/.github/workflows/checkov.yml
+++ b/.github/workflows/checkov.yml
@@ -26,7 +26,7 @@ jobs:
           skip_download: true # Do not download any data from Bridgecrew's servers
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
+        uses: github/codeql-action/upload-sarif@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
 
         if: success() || failure()
         with:
diff --git a/.github/workflows/kics.yml b/.github/workflows/kics.yml
index d89ba5f9..276a6885 100644
--- a/.github/workflows/kics.yml
+++ b/.github/workflows/kics.yml
@@ -32,6 +32,6 @@ jobs:
           platform_type: 'kubernetes'
           disable_secrets: true
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.8
+        uses: github/codeql-action/upload-sarif@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.8
         with:
           sarif_file: report-dir/results.sarif