diff --git a/.github/workflows/admin.yml b/.github/workflows/admin.yml
index 408bf9b1c4..f6613a80a3 100644
--- a/.github/workflows/admin.yml
+++ b/.github/workflows/admin.yml
@@ -68,7 +68,7 @@ jobs:
         run: make test-cover
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2
+        uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
         with:
           file: cover.out
           flags: admin
diff --git a/.github/workflows/agent.yml b/.github/workflows/agent.yml
index 764faaae05..477efde49a 100644
--- a/.github/workflows/agent.yml
+++ b/.github/workflows/agent.yml
@@ -105,7 +105,7 @@ jobs:
         run: make test-cover
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2
+        uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
         with:
           file: cover.out
           flags: agent
diff --git a/.github/workflows/managed.yml b/.github/workflows/managed.yml
index d139fb609f..d14e9ef9f9 100644
--- a/.github/workflows/managed.yml
+++ b/.github/workflows/managed.yml
@@ -94,7 +94,7 @@ jobs:
         run: docker exec -i pmm-server make -C managed test-update
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2
+        uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
         with:
           file: managed/cover.out
           flags: managed
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 43f47bb179..5dd26b561c 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -66,7 +66,7 @@ jobs:
         run: docker exec pmm-update-server make -C /root/go/src/github.com/percona/pmm/update run-race-cover RUN_FLAGS='-debug -check'
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2
+        uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
         with:
           file: cover.out
           flags: update
diff --git a/.github/workflows/vmproxy.yml b/.github/workflows/vmproxy.yml
index 667a5ae32b..70be29ab9d 100644
--- a/.github/workflows/vmproxy.yml
+++ b/.github/workflows/vmproxy.yml
@@ -70,7 +70,7 @@ jobs:
         run: make test-cover
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2
+        uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
         with:
           file: cover.out
           flags: vmproxy