diff --git a/scan-image/action.yml b/scan-image/action.yml
index e53f643..695da20 100644
--- a/scan-image/action.yml
+++ b/scan-image/action.yml
@@ -20,7 +20,7 @@ runs:
         ignore-unfixed: true
         format: sarif
         output: trivy-results.sarif
-    - uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
+    - uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
       if: always()
       with:
         sarif_file: trivy-results.sarif