diff --git a/.github/actions/windows-analysis/action.yaml b/.github/actions/windows-analysis/action.yaml
index d61570bf9..21117b348 100644
--- a/.github/actions/windows-analysis/action.yaml
+++ b/.github/actions/windows-analysis/action.yaml
@@ -84,7 +84,7 @@ runs:
           ${{ github.workspace }}/analysis.plog.sarif
 
     - name: Upload PVS-Studio Report
-      uses: github/codeql-action/upload-sarif@v3
+      uses: github/codeql-action/upload-sarif@ebcb5b36ded6beda4ceefea6a8bc4cc885255bb3
       with:
         sarif_file: "${{ github.workspace }}/analysis.plog.sarif"
         category: 'PVS-Studio (Windows)'
diff --git a/.github/workflows/analyze-project.yaml b/.github/workflows/analyze-project.yaml
index 65bfc3652..f6166b8a8 100644
--- a/.github/workflows/analyze-project.yaml
+++ b/.github/workflows/analyze-project.yaml
@@ -129,7 +129,7 @@ jobs:
           popd
 
       - name: Upload SARIF report files 📦
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@ebcb5b36ded6beda4ceefea6a8bc4cc885255bb3
         with:
           sarif_file: "${{ github.workspace }}/analytics/merged.sarif"
           category: 'clang-analyze (macOS Apple Silicon)'