diff --git a/.github/workflows/api-security.yml b/.github/workflows/api-security.yml
index caa48fce..f5416abe 100644
--- a/.github/workflows/api-security.yml
+++ b/.github/workflows/api-security.yml
@@ -57,7 +57,7 @@ jobs:
 
             - name: Upload Trivy SARIF
               if: always()
-              uses: github/codeql-action/upload-sarif@v3
+              uses: github/codeql-action/upload-sarif@v4
               with:
                   sarif_file: trivy-results.sarif
 
@@ -74,14 +74,15 @@ jobs:
                   go-version: "1.24.4"
                   cache-dependency-path: backend/gestion/go.sum
 
+            - name: Install gosec
+              run: go install github.com/securego/gosec/v2/cmd/gosec@latest
+
             - name: Run gosec
-              uses: securego/gosec@master
-              with:
-                  args: -fmt sarif -out gosec-results.sarif -exclude-dir=vendor ./...
-                  working-directory: backend/gestion
+              working-directory: backend/gestion
+              run: gosec -fmt sarif -out gosec-results.sarif ./...
 
             - name: Upload gosec SARIF
               if: always()
-              uses: github/codeql-action/upload-sarif@v3
+              uses: github/codeql-action/upload-sarif@v4
               with:
                   sarif_file: backend/gestion/gosec-results.sarif