diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2fa370e9..536e0c07 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -276,7 +276,7 @@ jobs:
         if: ${{ !inputs.dry_run }}
 
       - name: Upload scan result to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6
+        uses: github/codeql-action/upload-sarif@42213152a85ae7569bdb6bec7bcd74cd691bfe41 # v3.30.9
         continue-on-error: true
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}