diff --git a/.github/workflows/pull-request-main.yml b/.github/workflows/pull-request-main.yml
index c3a36e45..8c82725e 100644
--- a/.github/workflows/pull-request-main.yml
+++ b/.github/workflows/pull-request-main.yml
@@ -164,7 +164,7 @@ jobs:
     if: github.actor != 'dependabot[bot]'
     steps:
       - name: Scanning with Sonarqube
-        uses: smartcontractkit/.github/actions/ci-sonarqube-go@82f9a1703246639b70da5fd5a3e489363b04a0d6 # v0.6.0
+        uses: smartcontractkit/.github/actions/ci-sonarqube-go@4475ad7c475bacb1aefeccb132645149201ababd # v8.10.0
         with:
           # sonarqube inputs
           sonar-token: ${{ secrets.SONAR_TOKEN }}
diff --git a/.github/workflows/push-main.yml b/.github/workflows/push-main.yml
index 5e5c87c4..0fa7de31 100644
--- a/.github/workflows/push-main.yml
+++ b/.github/workflows/push-main.yml
@@ -163,7 +163,7 @@ jobs:
     if: github.actor != 'dependabot[bot]'
     steps:
       - name: Scanning with Sonarqube
-        uses: smartcontractkit/.github/actions/ci-sonarqube-go@82f9a1703246639b70da5fd5a3e489363b04a0d6 # v0.6.0
+        uses: smartcontractkit/.github/actions/ci-sonarqube-go@4475ad7c475bacb1aefeccb132645149201ababd # v8.10.0
         with:
           # sonarqube inputs
           sonar-token: ${{ secrets.SONAR_TOKEN }}