diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 514f320..a1940a8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -380,7 +380,7 @@ jobs:
           docker network rm smoke-net
 
       - name: Upload release-image runtime evidence
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: runtime-evidence-container
           path: artifacts/runtime_evidence_container.json
@@ -441,7 +441,7 @@ jobs:
           --model-path semantic/model.yaml
 
       - name: Upload live latency evidence
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: runtime-evidence-latency
           path: artifacts/runtime_evidence_latency.json
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cbfa350..1f8cf56 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -81,7 +81,7 @@ jobs:
           uv run --isolated --no-project --with "$wheel" auto_bi --help
 
       - name: Upload built distributions
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: dist
           path: dist/
@@ -147,7 +147,7 @@ jobs:
           upload-release-assets: false
 
       - name: Upload image SBOM artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: image-sbom
           path: autobi-agent-image.spdx.json