diff --git a/.github/workflows/gerrit-sonar-verify.yaml b/.github/workflows/gerrit-sonar-verify.yaml
index 4c9b6f805c..d2a7531859 100644
--- a/.github/workflows/gerrit-sonar-verify.yaml
+++ b/.github/workflows/gerrit-sonar-verify.yaml
@@ -135,7 +135,7 @@ jobs:
     permissions:
       contents: read
     # yamllint disable-line rule:line-length
-    uses: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml@5882f138dd24fcd6cb4ebc8bb3a68cee45a437a6  # v0.3.0
+    uses: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml@d42518f4ad6d71408c9f05ab2d135a9a86bcb548  # v0.3.1
     with:
       # Same SonarCloud project the Jenkins jobs report to, so the
       # migration does not fork the analysis history.