diff --git a/.github/workflows/secrets-and-sast-vendored.yml b/.github/workflows/secrets-and-sast-vendored.yml
index a04ddf5..362a047 100644
--- a/.github/workflows/secrets-and-sast-vendored.yml
+++ b/.github/workflows/secrets-and-sast-vendored.yml
@@ -292,7 +292,7 @@ jobs:
           retention-days: 30
 
       - name: Upload to GitHub Security
-        uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
+        uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
         if: inputs.upload-sarif
         with:
           sarif_file: reports/semgrep.sarif