diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 966f1ec0..1a489f45 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -110,7 +110,7 @@ jobs:
           name: self-hosting-sarif
           path: .
       - name: Upload SARIF
-        uses: github/codeql-action/upload-sarif@b0c4fd77f6c559021d78430ec4d0d169ae74a4eb # v3
+        uses: github/codeql-action/upload-sarif@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3
         with:
           sarif_file: results.sarif
           category: wardline-self-hosting