diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml
index a1becb89..2b091078 100644
--- a/.github/workflows/python-package.yml
+++ b/.github/workflows/python-package.yml
@@ -78,7 +78,7 @@ jobs:
           tox --verbose --verbose -e "${{ matrix.python-version }}-unit"
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v5.5.4
         with:
           fail_ci_if_error: true # optional (default = false)
           token: ${{ secrets.CODECOV_TOKEN }}