diff --git a/lib/analyze-action-post.js b/lib/analyze-action-post.js
index 217066b95..fcbe02d9e 100644
--- a/lib/analyze-action-post.js
+++ b/lib/analyze-action-post.js
@@ -127527,7 +127527,7 @@ var getFileOidsUnderPath = async function(basePath) {
     "Cannot list Git OIDs of tracked files."
   );
   const fileOidMap = {};
-  const regex = /^[0-9]+ ([0-9a-f]{40}(?:[a-f0-9]{24})?) [0-9]+\t(.+)$/;
+  const regex = /^[0-9]+ ([0-9a-f]{40}|[0-9a-f]{64}) [0-9]+\t(.+)$/;
   for (const line of stdout.split("\n")) {
     if (line) {
       const match = line.match(regex);
diff --git a/lib/analyze-action.js b/lib/analyze-action.js
index 34d103b7e..3cf844676 100644
--- a/lib/analyze-action.js
+++ b/lib/analyze-action.js
@@ -89885,7 +89885,7 @@ var getFileOidsUnderPath = async function(basePath) {
     "Cannot list Git OIDs of tracked files."
   );
   const fileOidMap = {};
-  const regex = /^[0-9]+ ([0-9a-f]{40}(?:[a-f0-9]{24})?) [0-9]+\t(.+)$/;
+  const regex = /^[0-9]+ ([0-9a-f]{40}|[0-9a-f]{64}) [0-9]+\t(.+)$/;
   for (const line of stdout.split("\n")) {
     if (line) {
       const match = line.match(regex);
diff --git a/lib/autobuild-action.js b/lib/autobuild-action.js
index 1a63724e0..6d14684eb 100644
--- a/lib/autobuild-action.js
+++ b/lib/autobuild-action.js
@@ -86338,7 +86338,7 @@ var getFileOidsUnderPath = async function(basePath) {
     "Cannot list Git OIDs of tracked files."
   );
   const fileOidMap = {};
-  const regex = /^[0-9]+ ([0-9a-f]{40}(?:[a-f0-9]{24})?) [0-9]+\t(.+)$/;
+  const regex = /^[0-9]+ ([0-9a-f]{40}|[0-9a-f]{64}) [0-9]+\t(.+)$/;
   for (const line of stdout.split("\n")) {
     if (line) {
       const match = line.match(regex);
diff --git a/lib/init-action-post.js b/lib/init-action-post.js
index c4c26ac80..51ad9bd55 100644
--- a/lib/init-action-post.js
+++ b/lib/init-action-post.js
@@ -131047,7 +131047,7 @@ var getFileOidsUnderPath = async function(basePath) {
     "Cannot list Git OIDs of tracked files."
   );
   const fileOidMap = {};
-  const regex = /^[0-9]+ ([0-9a-f]{40}(?:[a-f0-9]{24})?) [0-9]+\t(.+)$/;
+  const regex = /^[0-9]+ ([0-9a-f]{40}|[0-9a-f]{64}) [0-9]+\t(.+)$/;
   for (const line of stdout.split("\n")) {
     if (line) {
       const match = line.match(regex);
diff --git a/lib/init-action.js b/lib/init-action.js
index 7a29bba7a..f9c3a7d3b 100644
--- a/lib/init-action.js
+++ b/lib/init-action.js
@@ -87416,7 +87416,7 @@ var getFileOidsUnderPath = async function(basePath) {
     "Cannot list Git OIDs of tracked files."
   );
   const fileOidMap = {};
-  const regex = /^[0-9]+ ([0-9a-f]{40}(?:[a-f0-9]{24})?) [0-9]+\t(.+)$/;
+  const regex = /^[0-9]+ ([0-9a-f]{40}|[0-9a-f]{64}) [0-9]+\t(.+)$/;
   for (const line of stdout.split("\n")) {
     if (line) {
       const match = line.match(regex);
diff --git a/lib/resolve-environment-action.js b/lib/resolve-environment-action.js
index ba08c8fc4..ddaea4b96 100644
--- a/lib/resolve-environment-action.js
+++ b/lib/resolve-environment-action.js
@@ -86331,7 +86331,7 @@ var getFileOidsUnderPath = async function(basePath) {
     "Cannot list Git OIDs of tracked files."
   );
   const fileOidMap = {};
-  const regex = /^[0-9]+ ([0-9a-f]{40}(?:[a-f0-9]{24})?) [0-9]+\t(.+)$/;
+  const regex = /^[0-9]+ ([0-9a-f]{40}|[0-9a-f]{64}) [0-9]+\t(.+)$/;
   for (const line of stdout.split("\n")) {
     if (line) {
       const match = line.match(regex);
diff --git a/lib/setup-codeql-action.js b/lib/setup-codeql-action.js
index c5fcd3ae5..c78353f98 100644
--- a/lib/setup-codeql-action.js
+++ b/lib/setup-codeql-action.js
@@ -86179,7 +86179,7 @@ var getFileOidsUnderPath = async function(basePath) {
     "Cannot list Git OIDs of tracked files."
   );
   const fileOidMap = {};
-  const regex = /^[0-9]+ ([0-9a-f]{40}(?:[a-f0-9]{24})?) [0-9]+\t(.+)$/;
+  const regex = /^[0-9]+ ([0-9a-f]{40}|[0-9a-f]{64}) [0-9]+\t(.+)$/;
   for (const line of stdout.split("\n")) {
     if (line) {
       const match = line.match(regex);
diff --git a/lib/upload-lib.js b/lib/upload-lib.js
index bdfff78ab..6d3ef5008 100644
--- a/lib/upload-lib.js
+++ b/lib/upload-lib.js
@@ -89493,7 +89493,7 @@ var getFileOidsUnderPath = async function(basePath) {
     "Cannot list Git OIDs of tracked files."
   );
   const fileOidMap = {};
-  const regex = /^[0-9]+ ([0-9a-f]{40}(?:[a-f0-9]{24})?) [0-9]+\t(.+)$/;
+  const regex = /^[0-9]+ ([0-9a-f]{40}|[0-9a-f]{64}) [0-9]+\t(.+)$/;
   for (const line of stdout.split("\n")) {
     if (line) {
       const match = line.match(regex);
diff --git a/lib/upload-sarif-action.js b/lib/upload-sarif-action.js
index 0c24f28ec..be29a026c 100644
--- a/lib/upload-sarif-action.js
+++ b/lib/upload-sarif-action.js
@@ -89164,7 +89164,7 @@ var getFileOidsUnderPath = async function(basePath) {
     "Cannot list Git OIDs of tracked files."
   );
   const fileOidMap = {};
-  const regex = /^[0-9]+ ([0-9a-f]{40}(?:[a-f0-9]{24})?) [0-9]+\t(.+)$/;
+  const regex = /^[0-9]+ ([0-9a-f]{40}|[0-9a-f]{64}) [0-9]+\t(.+)$/;
   for (const line of stdout.split("\n")) {
     if (line) {
       const match = line.match(regex);
diff --git a/src/git-utils.ts b/src/git-utils.ts
index 68769699b..0f5bf52a4 100644
--- a/src/git-utils.ts
+++ b/src/git-utils.ts
@@ -298,7 +298,7 @@ export const getFileOidsUnderPath = async function (
   // 100644 6b792ea543ce75d7a8a03df591e3c85311ecb64f 0\tsrc/git-utils.ts
   // The fields are: <mode> <oid> <stage>\t<path>
   // The OID is either 40 (SHA-1) or 64 (SHA-256) hex characters.
-  const regex = /^[0-9]+ ([0-9a-f]{40}(?:[a-f0-9]{24})?) [0-9]+\t(.+)$/;
+  const regex = /^[0-9]+ ([0-9a-f]{40}|[0-9a-f]{64}) [0-9]+\t(.+)$/;
   for (const line of stdout.split("\n")) {
     if (line) {
       const match = line.match(regex);