diff --git a/src/workflow/scaffolder.js b/src/workflow/scaffolder.js
index 81cb0ac8..d87b3ac7 100644
--- a/src/workflow/scaffolder.js
+++ b/src/workflow/scaffolder.js
@@ -52,7 +52,7 @@ export default async function ({projectRoot}) {
             },
             {
               name: 'Upload to code-scanning',
-              uses: 'github/codeql-action/upload-sarif@v3.28.6',
+              uses: 'github/codeql-action/upload-sarif@v3.28.8',
               with: {sarif_file: 'results.sarif'}
             }
           ]
diff --git a/src/workflow/scaffolder.test.js b/src/workflow/scaffolder.test.js
index c0215af8..38ec054b 100644
--- a/src/workflow/scaffolder.test.js
+++ b/src/workflow/scaffolder.test.js
@@ -64,7 +64,7 @@ describe('workflow scaffolder', () => {
               },
               {
                 name: 'Upload to code-scanning',
-                uses: 'github/codeql-action/upload-sarif@v3.28.6',
+                uses: 'github/codeql-action/upload-sarif@v3.28.8',
                 with: {sarif_file: 'results.sarif'}
               }
             ]