diff --git a/.github/workflows/checkov.yml b/.github/workflows/checkov.yml
index 266ffb54..6787910d 100644
--- a/.github/workflows/checkov.yml
+++ b/.github/workflows/checkov.yml
@@ -26,7 +26,7 @@ jobs:
           skip_download: true # Do not download any data from Bridgecrew's servers
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
+        uses: github/codeql-action/upload-sarif@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
 
         if: success() || failure()
         with:
diff --git a/.github/workflows/kics.yml b/.github/workflows/kics.yml
index d89ba5f9..68dfb9dd 100644
--- a/.github/workflows/kics.yml
+++ b/.github/workflows/kics.yml
@@ -32,6 +32,6 @@ jobs:
           platform_type: 'kubernetes'
           disable_secrets: true
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.8
+        uses: github/codeql-action/upload-sarif@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.26.8
         with:
           sarif_file: report-dir/results.sarif