diff --git a/.github/workflows/trivy_scan.yml b/.github/workflows/trivy_scan.yml
index 1c9ceb49e..5372722f1 100644
--- a/.github/workflows/trivy_scan.yml
+++ b/.github/workflows/trivy_scan.yml
@@ -70,7 +70,7 @@ jobs:
           path: ${{ env.TRIVY_REPORT_PREFIX }}-${{ env.DATE_FULL }}.*
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@86b04fb0e47484f7282357688f21d5d0e32175fe # v3.27.6
+        uses: github/codeql-action/upload-sarif@dd7559424621a6dd0b32ababe9e4b271a87f78d2 # v3.27.6
         with:
           sarif_file: ${{ env.TRIVY_REPORT_PREFIX }}-${{ env.DATE_FULL }}.sarif
           category: sca-trivy-repo