diff --git a/.github/workflows/kube-linter-sample.yml b/.github/workflows/kube-linter-sample.yml
index 0ab9192..4828e75 100644
--- a/.github/workflows/kube-linter-sample.yml
+++ b/.github/workflows/kube-linter-sample.yml
@@ -36,7 +36,7 @@ jobs:
         continue-on-error: true
 
       - name: Upload SARIF report files to GitHub
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
 
       # Ensure the workflow eventually fails if files did not pass kube-linter checks.
       - name: Verify kube-linter-action succeeded
diff --git a/.github/workflows/self-test.yml b/.github/workflows/self-test.yml
index 998e5e2..0104331 100644
--- a/.github/workflows/self-test.yml
+++ b/.github/workflows/self-test.yml
@@ -49,7 +49,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      # Setup directory where github/codeql-action/upload-sarif@v4 looks up files by default.
+      # Setup directory where github/codeql-action/upload-sarif@v4.37.4 looks up files by default.
       - name: Create ../results directory for sarif files
         shell: bash
         run: mkdir -p ../results
@@ -63,14 +63,14 @@ jobs:
           output-file: ../results/kube-linter-success.sarif
 
       - name: Upload SARIF output file to GitHub
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
 
   test-with-sarif-upload-fail:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
 
-      # Setup directory where github/codeql-action/upload-sarif@v4 looks up files by default.
+      # Setup directory where github/codeql-action/upload-sarif@v4.37.4 looks up files by default.
       - name: Create ../results directory for sarif files
         shell: bash
         run: mkdir -p ../results
@@ -85,7 +85,7 @@ jobs:
         continue-on-error: true
 
       - name: Upload SARIF output file to GitHub
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
 
 
   test-fail-on-invalid-resource: