diff --git a/.github/workflows/terraform.yml b/.github/workflows/terraform.yml
index 4305b84..7561ffe 100644
--- a/.github/workflows/terraform.yml
+++ b/.github/workflows/terraform.yml
@@ -159,7 +159,7 @@ jobs:
 
       - name: Upload KICS results
         if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@b8bb9f28b8d3f992092362369c57161b755dea45 # v4
         with:
           sarif_file: ${{ env.KICS_RESULTS_DIR }}/results.sarif
           category: ${{ matrix.module }}