diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a0ead8f..8bbd25d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -188,7 +188,7 @@ jobs:
           generateSarif: '1'
 
       - name: Upload SARIF Results to GitHub Security Tab
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         if: always()
         with:
           sarif_file: semgrep.sarif
diff --git a/.github/workflows/secure-build.yml b/.github/workflows/secure-build.yml
index 531c2d0..b0db98f 100644
--- a/.github/workflows/secure-build.yml
+++ b/.github/workflows/secure-build.yml
@@ -123,7 +123,7 @@ jobs:
 
       # 9. Upload Container Security SARIF Report to GitHub Security Tab
       - name: Upload Container Scan SARIF Report
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         if: always()
         with:
           sarif_file: 'trivy-container-results.sarif'