diff --git a/.github/workflows/semgrep-security-scan.yml b/.github/workflows/semgrep-security-scan.yml
index d8bc0f4..6d01ccd 100644
--- a/.github/workflows/semgrep-security-scan.yml
+++ b/.github/workflows/semgrep-security-scan.yml
@@ -160,7 +160,7 @@ jobs:
       # github.event_name will not be 'pull_request' and this step will be skipped.
       - name: Post PR Comment
         if: steps.evaluate.outputs.total > 0 && github.event_name == 'pull_request' && always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const fs = require('fs');