diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f28e865c..7247d35c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -89,7 +89,7 @@ jobs:
 
       - name: Upload Opossum parser transcripts
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: opossum-parser-fixture
           path: results/opossum-fixture/
@@ -97,7 +97,7 @@ jobs:
 
       - name: Upload scanner transcripts
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: differential-tls-transcripts
           path: results/differential/
@@ -118,7 +118,7 @@ jobs:
 
       - name: Upload external fixture transcripts
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: external-vulnerable-fixture-transcripts
           path: results/external-fixture/
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 620ffda7..ad086093 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -164,7 +164,7 @@ jobs:
           "$hash  $(Split-Path $archive -Leaf)" | Set-Content "$archive.sha256"
 
       - name: Upload release artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: release-${{ matrix.target }}
           path: release/*