diff --git a/.github/workflows/zarn.yml b/.github/workflows/zarn.yml
index 350d081..01e45ab 100644
--- a/.github/workflows/zarn.yml
+++ b/.github/workflows/zarn.yml
@@ -14,3 +14,6 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
     - uses: htrgouvea/zarn@0.1.0
+    - uses: github/codeql-action/upload-sarif@v3
+      with:
+        sarif_file: result.sarif