diff --git a/.github/workflows/build-and-test.yaml b/.github/workflows/build-and-test.yaml
index 3458e80..93144f6 100644
--- a/.github/workflows/build-and-test.yaml
+++ b/.github/workflows/build-and-test.yaml
@@ -258,6 +258,6 @@ jobs:
           output-format: sarif
       -
         name: Upload Anchore scan SARIF report
-        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+        uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}
\ No newline at end of file