diff --git a/.github/workflows/qodana-cloud.yml b/.github/workflows/qodana-cloud.yml
index 3346eb585..111a5832e 100644
--- a/.github/workflows/qodana-cloud.yml
+++ b/.github/workflows/qodana-cloud.yml
@@ -15,6 +15,6 @@ jobs:
         uses: JetBrains/qodana-action@95ecb19ba27e308153723e54a790e4ad908b13a0 # v2023.2.8
         env:
           QODANA_TOKEN: ${{ secrets.QODANA_TOKEN }}
-      - uses: github/codeql-action/upload-sarif@66b90a5db151a8042fa97405c6cf843bbe433f7b # v2
+      - uses: github/codeql-action/upload-sarif@407ffafae6a767df3e0230c3df91b6443ae8df75 # v2
         with:
           sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json
\ No newline at end of file
diff --git a/.github/workflows/qodana.yml b/.github/workflows/qodana.yml
index 64d77c588..5c8b4bcea 100644
--- a/.github/workflows/qodana.yml
+++ b/.github/workflows/qodana.yml
@@ -19,7 +19,7 @@ jobs:
         with:
           args: "--fail-threshold,0"
           upload-result: "true"
-      - uses: github/codeql-action/upload-sarif@66b90a5db151a8042fa97405c6cf843bbe433f7b # v2
+      - uses: github/codeql-action/upload-sarif@407ffafae6a767df3e0230c3df91b6443ae8df75 # v2
         if: always()
         with:
           sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json