diff --git a/.github/workflows/sonarcloud-pr-scan.yml b/.github/workflows/sonarcloud-pr-scan.yml
index 9a124f7f..8e94f464 100644
--- a/.github/workflows/sonarcloud-pr-scan.yml
+++ b/.github/workflows/sonarcloud-pr-scan.yml
@@ -100,7 +100,7 @@ jobs:
 
     - name: Run SonarQube scan action
       if: ${{ env.SONAR_TOKEN != '' }}
-      uses: SonarSource/sonarqube-scan-action@ba9859eae8dd6bd29e412f25ddbbef3d032000f4 # v8.2.2
+      uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8.3.0
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index d24766e9..410de98c 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -50,7 +50,7 @@ jobs:
     # PRs hand off to sonarcloud-pr-scan (it has the real head SHA, and fork PRs get no secrets here).
     - name: Run SonarScanner
       if: ${{ github.event_name != 'pull_request' && env.SONAR_TOKEN != '' }}
-      uses: SonarSource/sonarqube-scan-action@ba9859eae8dd6bd29e412f25ddbbef3d032000f4 # v8.2.2
+      uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8.3.0
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with: