diff --git a/.github/actions/supply-chain-attest/action.yaml b/.github/actions/supply-chain-attest/action.yaml
index f89dd7cbe..f55d74d63 100644
--- a/.github/actions/supply-chain-attest/action.yaml
+++ b/.github/actions/supply-chain-attest/action.yaml
@@ -93,7 +93,7 @@ runs:
         always() &&
         (steps.grype-sbom.outputs.sarif != '' ||
          steps.grype-image.outputs.sarif != '')
-      uses: github/codeql-action/upload-sarif@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4
+      uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4
       with:
         sarif_file: ${{ steps.grype-sbom.outputs.sarif || steps.grype-image.outputs.sarif }}
         category: ${{ inputs.grype-category }}