diff --git a/.github/actions/lint-syft/action.yml b/.github/actions/lint-syft/action.yml
index 3b68df2..d4b40f7 100644
--- a/.github/actions/lint-syft/action.yml
+++ b/.github/actions/lint-syft/action.yml
@@ -12,7 +12,7 @@ runs:
         echo "SBOM generated: syft-sbom.json"
 
     - name: Upload SBOM artifact
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: syft-sbom
         path: syft-sbom.json
diff --git a/.github/actions/lint-trivy/action.yml b/.github/actions/lint-trivy/action.yml
index fc84628..3893410 100644
--- a/.github/actions/lint-trivy/action.yml
+++ b/.github/actions/lint-trivy/action.yml
@@ -17,7 +17,7 @@ runs:
         trivy fs . --format cyclonedx --output trivy-sbom.json
 
     - name: Upload SBOM artifact
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: trivy-sbom
         path: trivy-sbom.json