diff --git a/.github/workflows/proxy.yml b/.github/workflows/proxy.yml
index d86bc4b..6931a0d 100644
--- a/.github/workflows/proxy.yml
+++ b/.github/workflows/proxy.yml
@@ -127,7 +127,7 @@ jobs:
 
       - name: Upload Anchore scan SARIF report
         if: ${{ !cancelled() && github.event_name != 'pull_request' && (github.event_name != 'workflow_dispatch' || github.ref == 'refs/heads/main') }}
-        uses: github/codeql-action/upload-sarif@e58424170fb0262c8d7ed60a2e84b9bffe205c67 # codeql-bundle-v2.26.1
+        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
         with:
           sarif_file: ${{ steps.anchore-scan.outputs.sarif }}
           category: grype-proxy