diff --git a/src/workflow/scaffolder.js b/src/workflow/scaffolder.js
index f792490..9566409 100644
--- a/src/workflow/scaffolder.js
+++ b/src/workflow/scaffolder.js
@@ -52,7 +52,7 @@ export default async function ({projectRoot}) {
             },
             {
               name: 'Upload to code-scanning',
-              uses: 'github/codeql-action/upload-sarif@v4.31.6',
+              uses: 'github/codeql-action/upload-sarif@v4.31.7',
               with: {sarif_file: 'results.sarif'}
             }
           ]
diff --git a/src/workflow/scaffolder.test.js b/src/workflow/scaffolder.test.js
index 773cdfa..597b541 100644
--- a/src/workflow/scaffolder.test.js
+++ b/src/workflow/scaffolder.test.js
@@ -64,7 +64,7 @@ describe('workflow scaffolder', () => {
               },
               {
                 name: 'Upload to code-scanning',
-                uses: 'github/codeql-action/upload-sarif@v4.31.6',
+                uses: 'github/codeql-action/upload-sarif@v4.31.7',
                 with: {sarif_file: 'results.sarif'}
               }
             ]