diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 40e99a9..2b628df 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -178,7 +178,7 @@ jobs:
 
       - name: Upload Trivy scan results
         if: github.event_name == 'pull_request'
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: ${{ steps.image.outputs.trivy-results }}
           path: ${{ steps.image.outputs.trivy-results }}
diff --git a/.github/workflows/custom-airgap.yml b/.github/workflows/custom-airgap.yml
index 636dbb6..97c229c 100644
--- a/.github/workflows/custom-airgap.yml
+++ b/.github/workflows/custom-airgap.yml
@@ -22,7 +22,7 @@ jobs:
           ./create-bundle.sh
 
       - name: Upload bundle
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: k0s-custom-airgap-1.26.3.tar
           path: ./hack/custom-airgap-bundle-1.26.3/k0s-custom-airgap-1.26.3.tar