diff --git a/.github/workflows/vulnerability-scan.yml b/.github/workflows/vulnerability-scan.yml
index 01686e81..22af5b54 100644
--- a/.github/workflows/vulnerability-scan.yml
+++ b/.github/workflows/vulnerability-scan.yml
@@ -63,5 +63,5 @@ jobs:
         uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}
-          ref: ${{ needs.set-sha-ref.outputs.ref }}
+          ref: refs/heads/${{ needs.set-sha-ref.outputs.ref }}
           sha: ${{ needs.set-sha-ref.outputs.commit }}