diff --git a/justfile b/justfile
index e40186f75dff..6438ba36197a 100644
--- a/justfile
+++ b/justfile
@@ -61,4 +61,4 @@ check-semgrep:
   [ "$(just print-semgrep)" = "$(jq -r .semgrep < versions.json)" ] && echo '✓ semgrep versions match' || (echo '✗ semgrep version mismatch. Run `just upgrade-semgrep` to upgrade.' && exit 1)
 
 upgrade-semgrep:
-  jq '.semgrep = $v' --arg v $(just print-semgrep) <<<$(cat versions.json) > versions.json
+  pip3 install semgrep=="$(jq -r .semgrep < versions.json)"