diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index c5ffa37..5d6e645 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -76,7 +76,7 @@ jobs:
         run: $(go env GOPATH)/bin/gosec -fmt sarif -out results.sarif ./...
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: results.sarif
         if: always() && hashFiles('results.sarif') != ''