diff --git a/.github/workflows/build-ironic-images.yaml b/.github/workflows/build-ironic-images.yaml
index 30db47cd..9f8c4c87 100644
--- a/.github/workflows/build-ironic-images.yaml
+++ b/.github/workflows/build-ironic-images.yaml
@@ -67,7 +67,7 @@ jobs:
         run: ls -la artifacts
 
       - name: Save artifacts for next job
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4
         with:
           name: image-artifacts
           path: ironic-images/artifacts/
diff --git a/.github/workflows/code-test.yaml b/.github/workflows/code-test.yaml
index 34ca1ad3..86da75e0 100644
--- a/.github/workflows/code-test.yaml
+++ b/.github/workflows/code-test.yaml
@@ -44,7 +44,7 @@ jobs:
       - run: poetry install --sync --with test
       - run: poetry build
       - run: "poetry run pytest --cov --cov-report xml:coverage.xml"
-      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+      - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4
         with:
           name: coverage-${{ matrix.project }}
           path: python/${{ matrix.project }}/coverage.xml
@@ -60,7 +60,7 @@ jobs:
           merge-multiple: true
       - run: |
           npx cobertura-merge-globby -o output.xml --files=python/**/coverage.xml
-      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+      - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4
         with:
           name: coverage.xml
           path: coverage.xml