diff --git a/.github/workflows/ci-checks.yaml b/.github/workflows/ci-checks.yaml
index e386c69..3b9b94c 100644
--- a/.github/workflows/ci-checks.yaml
+++ b/.github/workflows/ci-checks.yaml
@@ -57,7 +57,7 @@ jobs:
         run: govulncheck -test ./...
 
       - name: Upload coverage report
-        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b 
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 
         with:
           name: coverage.txt
           path: coverage.txt
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 268a24a..b57ead7 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -92,7 +92,7 @@ jobs:
         echo "Hash of sbom.json is: $SBOM_DIGEST"
 
     - name: Upload SBOM
-      uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b
+      uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
       with:
         name: sbom.json
         path: sbom.json
@@ -143,7 +143,7 @@ jobs:
         echo "Hash of scan.json is: $SCAN_DIGEST"
 
     - name: Upload vulnerability scan report
-      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+      uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
       with:
         name: scan.json
         path: scan.json