diff --git a/.github/workflows/sonar.yaml b/.github/workflows/sonar.yaml
index ba95a88..4baad3f 100644
--- a/.github/workflows/sonar.yaml
+++ b/.github/workflows/sonar.yaml
@@ -37,7 +37,7 @@ jobs:
         # favor of SonarSource/sonarqube-scan-action; pin to an immutable
         # commit SHA (rather than a mutable branch/tag) to avoid supply-chain
         # exposure to a force-push or tag mutation upstream.
-        uses: SonarSource/sonarqube-scan-action@7006c4492b2e0ee0f816d36501671557c97f5995 # v8.1.0
+        uses: SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f # v8.2.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}