diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index e4c90c6c63f0d..e0b706f5fa505 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -19,7 +19,7 @@ jobs:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
       - run: go install gotest.tools/gotestsum@v0.4.2
       - run: gotestsum -- -cover -coverprofile=coverage.out -v -mod=readonly ./...
-      - uses: codecov/codecov-action@6d798873df2b1b8e5846dba6fb86631229fbcb17
+      - uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c
         with:
           files: ./coverage.out
           flags: unittests,golang
@@ -41,7 +41,7 @@ jobs:
           export NODE_ENV=test
           bin/web --frozen-lockfile
           bin/web test --reporters="jest-progress-bar-reporter" --reporters="./gh_ann_reporter.js" --coverage
-      - uses: codecov/codecov-action@6d798873df2b1b8e5846dba6fb86631229fbcb17
+      - uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c
         with:
           directory: ./web/app/coverage
           flags: unittests,javascript
@@ -58,6 +58,6 @@ jobs:
       - shell: bash
         run: mkdir -p target && cd target && bin/scurl -v https://github.com/xd009642/tarpaulin/releases/download/0.27.3/cargo-tarpaulin-x86_64-unknown-linux-musl.tar.gz | tar zxvf - && chmod 755 cargo-tarpaulin
       - run: target/cargo-tarpaulin tarpaulin --workspace --out Xml
-      - uses: codecov/codecov-action@6d798873df2b1b8e5846dba6fb86631229fbcb17
+      - uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c
         with:
           flags: unittests,rust