diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index 0e4d47d4..fb1b2f47 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -40,6 +40,6 @@ jobs:
         version: 'v0.69.3'
     - name: ⬆️ Upload Trivy results
       if: ${{ github.event_name != 'pull_request' }}
-      uses: github/codeql-action/upload-sarif@v4
+      uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4
       with:
         sarif_file: 'trivy-results.sarif'