diff --git a/.github/workflows/grype.yml b/.github/workflows/grype.yml
index 05b6111..afc05f8 100644
--- a/.github/workflows/grype.yml
+++ b/.github/workflows/grype.yml
@@ -100,7 +100,7 @@ jobs:
       - name: Upload Grype SARIF to Code Scanning
         if: always()
         continue-on-error: true
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+        uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           sarif_file: results.sarif
           category: grype-sca
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 2754c85..b3bd2bd 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -78,6 +78,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+        uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/trivy-sca.yml b/.github/workflows/trivy-sca.yml
index e7212a6..5e00a09 100644
--- a/.github/workflows/trivy-sca.yml
+++ b/.github/workflows/trivy-sca.yml
@@ -110,7 +110,7 @@ jobs:
 
       - name: Upload Trivy SCA SARIF to GitHub Security
         if: always()
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+        uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           sarif_file: "trivy-sca-results.sarif"
           category: "trivy-sca"
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index d7487d4..37f1b58 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -109,7 +109,7 @@ jobs:
 
       - name: Upload Trivy SARIF to GitHub Security
         if: always()
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+        uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           sarif_file: 'trivy-results.sarif'
           category: 'trivy'
\ No newline at end of file