diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index ef0e2bfff..8b96850c5 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -35,6 +35,6 @@ jobs:
         run: semgrep scan --sarif-output=semgrep.sarif
 
       - name: "Upload SARIF report"
-        uses: "github/codeql-action/upload-sarif@v3"
+        uses: "github/codeql-action/upload-sarif@v4"
         with:
           sarif_file: semgrep.sarif