diff --git a/.github/workflows/govulncheck-scan.yaml b/.github/workflows/govulncheck-scan.yaml
index 9d965787..6bb40e4a 100644
--- a/.github/workflows/govulncheck-scan.yaml
+++ b/.github/workflows/govulncheck-scan.yaml
@@ -40,7 +40,7 @@ jobs:
 
       - name: Upload SARIF file
         if: always()
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.3
         with:
           sarif_file: govulncheck.sarif
           category: govulncheck
diff --git a/.github/workflows/trivy-iac-scan.yaml b/.github/workflows/trivy-iac-scan.yaml
index 6d310549..37b7e76c 100644
--- a/.github/workflows/trivy-iac-scan.yaml
+++ b/.github/workflows/trivy-iac-scan.yaml
@@ -36,7 +36,7 @@ jobs:
 
       - name: Upload SARIF
         if: always()
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.3
         with:
           sarif_file: trivy-iac.sarif
           category: trivy-iac