diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 3d0576b..3d48a08 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -37,14 +37,14 @@ jobs:
           args: '-no-fail -fmt sarif -out gosec-agent.sarif ./gearbox-agent/...'
 
       - name: Upload gosec results to GitHub Security
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         if: always()
         with:
           sarif_file: gosec-gearbox.sarif
           category: gosec-gearbox
 
       - name: Upload gosec agent results to GitHub Security
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         if: always()
         with:
           sarif_file: gosec-agent.sarif
@@ -67,7 +67,7 @@ jobs:
           severity: 'CRITICAL,HIGH,MEDIUM'
 
       - name: Upload Trivy results to GitHub Security
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         if: always()
         with:
           sarif_file: 'trivy-results.sarif'