diff --git a/.github/workflows/tests-integration.yml b/.github/workflows/tests-integration.yml
index 54bd57d..fee083e 100644
--- a/.github/workflows/tests-integration.yml
+++ b/.github/workflows/tests-integration.yml
@@ -138,7 +138,7 @@ jobs:
         run: pytest tests/integration/ -v -m integration --ignore=tests/integration/test_session_cache.py --cov=nc_mcp_server --cov-report=xml:coverage-integration.xml
 
       - name: Upload coverage
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v5
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
         with:
           files: coverage-integration.xml
           flags: integration,nc${{ matrix.nextcloud-version }}
@@ -223,7 +223,7 @@ jobs:
         run: pytest tests/integration/test_session_cache.py -v -m integration --cov=nc_mcp_server --cov-report=xml:coverage-session-cache.xml
 
       - name: Upload coverage
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v5
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
         with:
           files: coverage-session-cache.xml
           flags: session-cache
@@ -319,7 +319,7 @@ jobs:
         run: pytest tests/integration/test_user_permissions.py -v -m integration --cov=nc_mcp_server --cov-report=xml:coverage-user-perms.xml
 
       - name: Upload coverage
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v5
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
         with:
           files: coverage-user-perms.xml
           flags: user-permissions
diff --git a/.github/workflows/tests-unit.yml b/.github/workflows/tests-unit.yml
index 529b765..cb72164 100644
--- a/.github/workflows/tests-unit.yml
+++ b/.github/workflows/tests-unit.yml
@@ -29,7 +29,7 @@ jobs:
         run: pytest tests/ -v --ignore=tests/integration/ --cov=nc_mcp_server --cov-report=xml:coverage-unit.xml
 
       - name: Upload coverage
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v5
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
         with:
           files: coverage-unit.xml
           flags: unit,py${{ matrix.python-version }}