diff --git a/.github/workflows/snapshot.yml b/.github/workflows/snapshot.yml
index 3570ea5a8..e131822fe 100644
--- a/.github/workflows/snapshot.yml
+++ b/.github/workflows/snapshot.yml
@@ -79,13 +79,13 @@ jobs:
 
       - name: Archive test logs
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # v7
         with:
           name: test-logs-${{ github.sha }}
           path: com.avaloq.tools.ddk.xtext.test/target/work/data/.metadata/.log
 
       - name: Upload p2 update site as artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # v7
         with:
           name: p2-update-site-${{ github.sha }}
           path: ddk-repository/target/repository/
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index f6ad5e102..bb9a0cc13 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -87,7 +87,7 @@ jobs:
         run: bash .github/scripts/check-surefire-reports.sh
       - name: Archive Tycho Surefire Plugin
         if: ${{ failure() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # v7
         with:
           name: tycho-surefire-plugin
           path: com.avaloq.tools.ddk.xtext.test/target/work/data/.metadata/.log