diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index a502871..d15a538 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -29,7 +29,7 @@ jobs:
         run: npm run test:coverage
 
       - name: Upload coverage summary
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: coverage-summary
           path: coverage/coverage-summary.json
diff --git a/.github/workflows/nightly-scan.template.yml b/.github/workflows/nightly-scan.template.yml
index bc777c9..7753958 100644
--- a/.github/workflows/nightly-scan.template.yml
+++ b/.github/workflows/nightly-scan.template.yml
@@ -46,7 +46,7 @@ jobs:
             gh issue create --title "$TITLE" --body-file "$BODY_FILE" --label "mcp-observatory"
           fi
       - name: Upload scan artifacts
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         if: always()
         with:
           name: observatory-nightly-${{ github.run_number }}
diff --git a/.github/workflows/real-server-matrix.yml b/.github/workflows/real-server-matrix.yml
index 79ed20b..86f4c3b 100644
--- a/.github/workflows/real-server-matrix.yml
+++ b/.github/workflows/real-server-matrix.yml
@@ -43,7 +43,7 @@ jobs:
 
       - name: Upload matrix artifacts
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: real-server-matrix-artifacts
           path: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 68861e3..31688b4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -205,7 +205,7 @@ jobs:
 
       - name: Upload GitHub fallback package artifact
         if: steps.npm-auth.outputs.valid != 'true' && steps.npm-oidc.outputs.configured != 'true'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: mcp-observatory-${{ steps.fallback-package.outputs.version }}
           path: ${{ steps.fallback-package.outputs.file }}