diff --git a/.github/workflows/conformance-docs.yml b/.github/workflows/conformance-docs.yml
index 016fbc63..c51e38fd 100644
--- a/.github/workflows/conformance-docs.yml
+++ b/.github/workflows/conformance-docs.yml
@@ -65,7 +65,7 @@ jobs:
       - name: Build documentation
         run: mkdocs build --clean --config-file .mkdocs_build.yml
 
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: conformance-docs
           path: conformance/site/
diff --git a/.github/workflows/conformance-package.yml b/.github/workflows/conformance-package.yml
index e1eed02f..ee86dfca 100644
--- a/.github/workflows/conformance-package.yml
+++ b/.github/workflows/conformance-package.yml
@@ -43,7 +43,7 @@ jobs:
             rm -rf "$RUNNER_TEMP/conformance-artifact"
           done
 
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: conformance-dist
           path: conformance/dist/
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index ca9e17ed..6849d822 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -111,7 +111,7 @@ jobs:
           test -s site/conformance/index.html
           test "$(cat site/CNAME)" = "trace.agentrust-io.com"
 
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: trace-combined-docs
           path: site/
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c697f10b..94007b58 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -50,7 +50,7 @@ jobs:
             --workspace "$GITHUB_WORKSPACE" \
             --expected-version "${GITHUB_REF_NAME#v}"
 
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.0
         with:
           name: dist
           path: dist/
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index 8a645941..42ca22da 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -26,7 +26,7 @@ jobs:
           format: spdx-json
           output-file: sbom.spdx.json
       - name: Upload SBOM artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sbom
           path: sbom.spdx.json
diff --git a/.github/workflows/trust-record-verify.yml b/.github/workflows/trust-record-verify.yml
index 512a00a7..5a9b6987 100644
--- a/.github/workflows/trust-record-verify.yml
+++ b/.github/workflows/trust-record-verify.yml
@@ -114,7 +114,7 @@ jobs:
 
       - name: Upload the report
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: differential-report
           path: |