diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1fdeae7b403..c8ffd3143f1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -74,7 +74,7 @@ jobs:
 
       - name: Upload Surefire Reports
         if: failure()
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce   # 3.1.2
+        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3   # 4.3.1
         with:
           name: surefire-reports-${{matrix.os}}
           path: "**/target/surefire-reports/*"
@@ -94,7 +94,7 @@ jobs:
 
       - name: Upload reproducibility failure context artifacts
         if: failure()
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce   # 3.1.2
+        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3   # 4.3.1
         with:
           name: reproducibility-failure-context-${{matrix.os}}
           path: |
diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
index 1f31ec8dc5f..9469f775e28 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -60,7 +60,7 @@ jobs:
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@83fd05a356d7e2593de66fc9913b3002723633cb    # 3.1.0
+        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3    # 3.1.0
         with:
           name: SARIF file
           path: results.sarif