diff --git a/.github/workflows/reusable-sast-codeql.yml b/.github/workflows/reusable-sast-codeql.yml
index ccaf8dc..2ad2d05 100644
--- a/.github/workflows/reusable-sast-codeql.yml
+++ b/.github/workflows/reusable-sast-codeql.yml
@@ -79,7 +79,7 @@ jobs:
           queries: ${{ inputs.queries }}
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           category: '/language:${{ inputs.languages }}'
           # Write SARIF to a directory in addition to the code-scanning upload,