diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b1fbfd8f25..f486744009 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -44,6 +44,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: 'Upload to code-scanning'
-        uses: github/codeql-action/upload-sarif@f0705a6d6f9c8ebf64b5188fdd89bc4cd20313bc # v1.0.26
+        uses: github/codeql-action/upload-sarif@b4187d626bb70948c40956ceb85cc2245d924822 # v1.0.26
         with:
           sarif_file: results.sarif