diff --git a/code-scanning/ethicalcheck.yml b/code-scanning/ethicalcheck.yml
index c089015..4a8ad3c 100644
--- a/code-scanning/ethicalcheck.yml
+++ b/code-scanning/ethicalcheck.yml
@@ -49,9 +49,16 @@ jobs:
 
     steps:
        - name: EthicalCheck  Free & Automated API Security Testing Service
-         uses: apisec-inc/ethicalcheck-action@latest
+         uses: apisec-inc/ethicalcheck-action@005fac321dd843682b1af6b72f30caaf9952c641
          with:
           # The OpenAPI Specification URL or Swagger Path or Public Postman collection URL.
           oas-url: "http://netbanking.apisec.ai:8080/v2/api-docs"
           # The email address to which the penetration test report will be sent.
-          email: "xxx@apisec.ai"
\ No newline at end of file
+          email: "xxx@apisec.ai"
+          sarif-result-file: "ethicalcheck-results.sarif"
+          
+      - name: Upload sarif file to repository
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: ./ethicalcheck-results.sarif
+