diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 0b9d28c1..cd4afb1c 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -270,7 +270,7 @@ jobs:
 
       - name: Upload Trivy diagnostic artifacts
         if: always() && (hashFiles('trivy-results.txt') != '' || hashFiles('trivy-results.sarif') != '')
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: trivy-diagnostics
           path: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index fcada1f6..94c0503e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -104,14 +104,14 @@ jobs:
 
       - name: Upload SBOM
         if: always() && hashFiles('artifacts/sbom/*') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sbom
           path: artifacts/sbom/*
 
       - name: Upload .NET test results
         if: always() && hashFiles('artifacts/test-results/*.trx') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: dotnet-test-results
           path: artifacts/test-results/*.trx