diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index a2d957ddf..cc9a522a8 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -21,9 +21,9 @@ jobs:
     needs: [semgrep-validate]
     runs-on: ubuntu-latest
     container:
-      image: returntocorp/semgrep:1.36.0
+      image: returntocorp/semgrep:1.107.0
     env:
-      SEMGREP_SEND_METRICS: 0
+      SEMGREP_SEND_METRICS: off
     # Skip any PR created by dependabot to avoid permission issues
     if: (github.actor != 'dependabot[bot]')
     steps: