diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 42b8842..becf0c4 100755
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -50,6 +50,6 @@ jobs:
 
     - name: upload Anchore scan SARIF report
       if: success() || failure()
-      uses: github/codeql-action/upload-sarif@v1
+      uses: github/codeql-action/upload-sarif@v2
       with:
         sarif_file: ${{ steps.scan.outputs.sarif }}