diff --git a/.github/workflows/sync-refs.yml b/.github/workflows/sync-refs.yml
index 72b0d8b..4b415e0 100644
--- a/.github/workflows/sync-refs.yml
+++ b/.github/workflows/sync-refs.yml
@@ -54,6 +54,6 @@ jobs:
         with:
           name: ossf-scorecard-results.sarif
           path: ossf-scorecard-results.sarif
-      - uses: github/codeql-action/upload-sarif@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
+      - uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
         with:
           sarif_file: ossf-scorecard-results.sarif