diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 821c1ae..cce332e 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -55,7 +55,7 @@ jobs:
         run: ./gradlew lintDebug
       - name: Upload Lint SARIF
         if: always() && github.actor != 'dependabot[bot]'
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         with:
           sarif_file: app/build/reports/lint-results-debug.sarif
           category: lint
@@ -81,7 +81,7 @@ jobs:
         run: ./gradlew detekt
       - name: Upload Detekt SARIF
         if: always() && github.actor != 'dependabot[bot]'
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         with:
           sarif_file: app/build/reports/detekt/detekt.sarif
           category: detekt