diff --git a/.github/workflows/csi-integration-tests.yml b/.github/workflows/csi-integration-tests.yml
index 10dbad06..7118450e 100644
--- a/.github/workflows/csi-integration-tests.yml
+++ b/.github/workflows/csi-integration-tests.yml
@@ -60,7 +60,7 @@ jobs:
         run: 'shasum -a 256 image.tar | tee image.tar.sha256'
 
       - name: Store image
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: tested-image
           path: |
@@ -136,7 +136,7 @@ jobs:
           persist-credentials: false
 
       - name: Load image
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: tested-image
 
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 1a01f603..12522431 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -24,4 +24,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
+        uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1