diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0dd2e8b..e3a93b4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -106,7 +106,7 @@ jobs:
         run: cargo build --release -p ocserve
 
       - name: upload binary artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4.6.0
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # v4.6.0
         with:
           name: ocserve-linux-x86_64
           path: target/release/ocserve
@@ -272,7 +272,7 @@ jobs:
           exit 0
       - name: upload check log
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4.6.0
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # v4.6.0
         with:
           name: check-${{ matrix.os }}
           path: check.log
@@ -305,7 +305,7 @@ jobs:
           exit "$rc"
       - name: upload pty log
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4.6.0
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # v4.6.0
         with:
           name: pty-${{ matrix.os }}
           path: pty.log
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fae5c92..35d972f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -142,7 +142,7 @@ jobs:
           (cd dist && sha256sum "${NAME}.tar.gz" > "${NAME}.tar.gz.sha256")
           echo "packaged ${NAME}"
 
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4.6.0
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # v4.6.0
         with:
           name: ${{ matrix.target }}
           path: dist/*.tar.gz*
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 4898c96..b615f62 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -26,7 +26,7 @@ jobs:
           results_format: sarif
           publish_results: true
         continue-on-error: true
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4.6.0
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # v4.6.0
         with:
           name: SARIF
           path: results.sarif