diff --git a/.github/workflows/code-scan.yml b/.github/workflows/code-scan.yml
index d16de5c..e670595 100644
--- a/.github/workflows/code-scan.yml
+++ b/.github/workflows/code-scan.yml
@@ -181,7 +181,7 @@ jobs:
             )
           )' -- './results.sarif' 1> './results-combined.sarif'
       - name: "Upload SARIF results file to GitHub"
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.3
         if: "${{ github.ref == 'refs/heads/main' }}"
         with:
           token: "${{ github.token }}"