diff --git a/.github/workflows/ioc-scan.yml b/.github/workflows/ioc-scan.yml
index 1252544..c0c5d88 100644
--- a/.github/workflows/ioc-scan.yml
+++ b/.github/workflows/ioc-scan.yml
@@ -44,7 +44,7 @@ jobs:
           severity: CRITICAL,HIGH
           exit-code: ${{ inputs.fail-on-critical && '1' || '0' }}
       - name: Upload Trivy results
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: trivy-results.sarif
           category: trivy
@@ -57,11 +57,11 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Run CodeQL analysis
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ inputs.language == 'python' && 'python' || inputs.language == 'node' && 'javascript' || inputs.language == 'go' && 'go' || 'python' }}
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
 
   osv-scanner:
     if: inputs.scan-dependency