diff --git a/.github/workflows/build-manager-image.yml b/.github/workflows/build-manager-image.yml
index fed6184a21..fc985e674c 100644
--- a/.github/workflows/build-manager-image.yml
+++ b/.github/workflows/build-manager-image.yml
@@ -102,7 +102,7 @@ jobs:
           retention-days: 7
 
       - name: Upload Anchore scan SARIF report
-        uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
+        uses: github/codeql-action/upload-sarif@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2
         if: ${{ always() && steps.meta.outputs.should_push == 'true' }}
         with:
           sarif_file: ${{ steps.manager-anchore-scan.outputs.sarif }}
diff --git a/.github/workflows/ci_cd.yml b/.github/workflows/ci_cd.yml
index d85da3410b..ed108de26c 100644
--- a/.github/workflows/ci_cd.yml
+++ b/.github/workflows/ci_cd.yml
@@ -858,7 +858,7 @@ jobs:
         if: |
           !cancelled() &&
           steps.manager-docker-command.outputs.pushToDockerHub == 'true'
-        uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
+        uses: github/codeql-action/upload-sarif@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2
         with:
           sarif_file: ${{ steps.manager-anchore-scan.outputs.sarif }}
           category: grype-manager