diff --git a/.github/workflows/coverage-python.yml b/.github/workflows/coverage-python.yml
index afa876a1..4ec12995 100644
--- a/.github/workflows/coverage-python.yml
+++ b/.github/workflows/coverage-python.yml
@@ -80,7 +80,7 @@ jobs:
           cargo llvm-cov report -p ordvec-python --summary-only
           cargo llvm-cov report -p ordvec-python --lcov --output-path binding-lcov.info
       - name: Upload binding coverage to Codecov
-        uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
         with:
           files: binding-lcov.info
           flags: python-binding
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 8b930ced..50064581 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -105,7 +105,7 @@ jobs:
         run: cargo llvm-cov --all-features --target x86_64-unknown-linux-gnu --fail-under-lines 85 --lcov --output-path lcov.info
       - name: Upload coverage to Codecov
         if: steps.sde.outputs.sde-available == 'true'
-        uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
         with:
           files: lcov.info
           fail_ci_if_error: false