diff --git a/build/Build.CI.GitHubActions.cs b/build/Build.CI.GitHubActions.cs
index b9da7b93c..be01442dc 100644
--- a/build/Build.CI.GitHubActions.cs
+++ b/build/Build.CI.GitHubActions.cs
@@ -153,7 +153,7 @@ void IConfigureGitHubActions.ConfigureSteps(GitHubActionsStepPipeline pipeline)
             pipeline.Insert(GitHubActionsStepPosition.PostRun, new GitHubActionsCustomStep
             {
                 Name = "Upload risk-report SARIF to GitHub code scanning",
-                Uses = "github/codeql-action/upload-sarif@v3",
+                Uses = "github/codeql-action/upload-sarif@v4",
                 With = new Dictionary<string, string>
                 {
                     ["sarif_file"] = "output/packageguard/risk-report.sarif",