diff --git a/.github/workflows/guest-kernel.yml b/.github/workflows/guest-kernel.yml
index f05e86e..a61016c 100644
--- a/.github/workflows/guest-kernel.yml
+++ b/.github/workflows/guest-kernel.yml
@@ -136,7 +136,7 @@ jobs:
           subject-path: dist/*
 
       - name: Upload candidate
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: guest-kernel-${{ steps.kernel.outputs.version }}
           path: dist/
@@ -211,7 +211,7 @@ jobs:
 
       - name: Upload promotion results
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: guest-kernel-promotion-${{ github.run_id }}
           path: |
diff --git a/.github/workflows/kvm.yml b/.github/workflows/kvm.yml
index 23eaf85..ccc09b1 100644
--- a/.github/workflows/kvm.yml
+++ b/.github/workflows/kvm.yml
@@ -130,7 +130,7 @@ jobs:
 
       - name: Upload performance results
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: kvm-performance-${{ github.run_id }}
           path: vmm/perf-results.txt
@@ -138,7 +138,7 @@ jobs:
 
       - name: Upload orchestrator benchmark results
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: orchestrator-performance-${{ github.run_id }}
           path: perf-orch
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fa3a73e..e881b07 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -128,7 +128,7 @@ jobs:
           subject-path: dist/*
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: linux-x86_64-musl
           path: dist/