diff --git a/.github/workflows/build-check.yml b/.github/workflows/build-check.yml
index a11a27c..db6e731 100644
--- a/.github/workflows/build-check.yml
+++ b/.github/workflows/build-check.yml
@@ -114,7 +114,7 @@ jobs:
 
       - name: Upload the validated release tarball
         if: ${{ inputs.release-artifact && matrix.os == 'ubuntu-latest' }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: npm-release
           path: ${{ runner.temp }}/npm-release/
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 85da3a8..930f2dc 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -92,7 +92,7 @@ jobs:
 
       - name: Upload safe E2E diagnostics
         if: ${{ always() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: sliver-script-e2e-${{ matrix.platform }}
           path: e2e-results/${{ matrix.platform }}