diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index db0a54a..a6656ab 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -101,7 +101,7 @@ jobs:
       - run: python -m twine check dist/*
       - id: package-version
         run: echo "version=$(python -c 'import tomllib; print(tomllib.load(open("pyproject.toml", "rb"))["project"]["version"])')" >> "$GITHUB_OUTPUT"
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: python-package-distributions
           path: dist/
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 46d1591..2ec09ba 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -64,7 +64,7 @@ jobs:
             --of JSON \
             -o artifacts/mendmark.cdx.json
           python -c 'import json; d=json.load(open("artifacts/mendmark.cdx.json")); assert d["bomFormat"] == "CycloneDX"; assert d["metadata"]["component"]["name"] == "mendmark-evals"'
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: mendmark-cyclonedx-sbom-${{ github.sha }}
           path: artifacts/mendmark.cdx.json