diff --git a/.github/workflows/nightly-build.yml b/.github/workflows/nightly-build.yml
index 3bd5178b..0bc400e6 100644
--- a/.github/workflows/nightly-build.yml
+++ b/.github/workflows/nightly-build.yml
@@ -207,7 +207,7 @@ jobs:
           output: 'trivy-nightly.sarif'
 
       - name: Upload Trivy results
-        uses: github/codeql-action/upload-sarif@4bdb89f48054571735e3792627da6195c57459e2  # v3.31.10
+        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89  # v4.31.10
         with:
           sarif_file: 'trivy-nightly.sarif'
           category: 'trivy-nightly'