diff --git a/.github/workflows/python-release.yml b/.github/workflows/python-release.yml
index 99f8125..5a8bdef 100644
--- a/.github/workflows/python-release.yml
+++ b/.github/workflows/python-release.yml
@@ -157,7 +157,7 @@ jobs:
           echo "digests=$digests" >> "$GITHUB_OUTPUT"
 
       - name: Upload dist as artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # pin v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # pin v7.0.1
         with:
           name: python-dist
           path: publishers/python/dist/
@@ -165,7 +165,7 @@ jobs:
           retention-days: 7
 
       - name: Upload SBOM as artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # pin v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # pin v7.0.1
         with:
           name: python-sbom
           path: publishers/python/sbom/
diff --git a/.github/workflows/supply-chain.yml b/.github/workflows/supply-chain.yml
index b9290b1..52159c8 100644
--- a/.github/workflows/supply-chain.yml
+++ b/.github/workflows/supply-chain.yml
@@ -247,7 +247,7 @@ jobs:
           head -20 "../license-reports/licenses-${{ matrix.component }}.csv" || true
 
       - name: Upload license manifest
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # pin v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # pin v7.0.1
         with:
           name: licenses-${{ matrix.component }}
           path: license-reports/licenses-${{ matrix.component }}.csv
@@ -292,7 +292,7 @@ jobs:
           fi
 
       - name: Upload license manifest
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # pin v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # pin v7.0.1
         with:
           name: licenses-python
           path: license-reports/licenses-python.csv