diff --git a/.github/workflows/main-validation.yml b/.github/workflows/main-validation.yml
index 5ef01e7..1998526 100644
--- a/.github/workflows/main-validation.yml
+++ b/.github/workflows/main-validation.yml
@@ -329,6 +329,6 @@ jobs:
           fi
 
       - name: Run SonarQube scan
-        uses: SonarSource/sonarqube-scan-action@ba9859eae8dd6bd29e412f25ddbbef3d032000f4 # v8
+        uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
index 7ebe618..ffee485 100644
--- a/.github/workflows/pr-validation.yml
+++ b/.github/workflows/pr-validation.yml
@@ -281,7 +281,7 @@ jobs:
           fi
 
       - name: Run SonarQube scan
-        uses: SonarSource/sonarqube-scan-action@ba9859eae8dd6bd29e412f25ddbbef3d032000f4 # v8
+        uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           retention-days: 14
diff --git a/cmd/cmdshape-ci/release_workflow_test.go b/cmd/cmdshape-ci/release_workflow_test.go
index cbd033e..eb544a9 100644
--- a/cmd/cmdshape-ci/release_workflow_test.go
+++ b/cmd/cmdshape-ci/release_workflow_test.go
@@ -140,7 +140,7 @@ var _ = Describe("validation workflow dependencies", func() {
 			Expect(workflow).NotTo(ContainSubstring("go install "))
 			Expect(workflow).NotTo(ContainSubstring("raw.githubusercontent.com/golangci"))
 			Expect(workflow).To(ContainSubstring(
-				"uses: SonarSource/sonarqube-scan-action@ba9859eae8dd6bd29e412f25ddbbef3d032000f4 # v8",
+				"uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8",
 			))
 			Expect(workflow).NotTo(ContainSubstring("uses: SonarSource/sonarqube-scan-action@v8"))
 		},