diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 215988d8..4eaa9d61 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -103,7 +103,7 @@ jobs:
       # Used for code coverage later
       - name: Upload built package
         if: ${{ matrix.os == 'macos-14' && matrix.python == 311 }}
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: package-wheel-cp${{ matrix.python }}-${{ matrix.os }}
           path: dist/*.whl
diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index a1a2bfae..877e84d7 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -115,7 +115,7 @@ jobs:
         run: bash bin/cibw/build_wheels.sh
 
       - name: Upload built wheels
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: package-wheel-cp${{ matrix.python }}-${{ matrix.os }}
           path: dist/*.whl
@@ -147,7 +147,7 @@ jobs:
         run: bash bin/test_sdist.sh
 
       - name: Store artifacts
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.2
         with: 
           name: package-sdist
           path: dist/*.tar.gz
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 10b0db4b..c5c5b42b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -111,7 +111,7 @@ jobs:
         run: bash bin/cibw/build_wheels.sh
 
       - name: Upload built wheels
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: package-wheel-cp${{ matrix.python }}-${{ matrix.os }}
           path: dist/*.whl
@@ -138,7 +138,7 @@ jobs:
         run: bash bin/test_sdist.sh
 
       - name: Store artifacts
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.2
         with: 
           name: package-sdist
           path: dist/*.tar.gz
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 37a7c032..d33531b3 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -47,7 +47,7 @@ jobs:
           publish_results: true
 
       - name: Upload artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/test-release.yml b/.github/workflows/test-release.yml
index cf4395e7..721f1cf1 100644
--- a/.github/workflows/test-release.yml
+++ b/.github/workflows/test-release.yml
@@ -109,7 +109,7 @@ jobs:
         run: bash bin/cibw/build_wheels.sh
 
       - name: Upload built wheels
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: package-wheel-cp${{ matrix.python }}-${{ matrix.os }}
           path: dist/*.whl
@@ -136,7 +136,7 @@ jobs:
         run: bash bin/test_sdist.sh
 
       - name: Store artifacts
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.2
         with: 
           name: package-sdist
           path: dist/*.tar.gz