diff --git a/.github/workflows/docker-cis-harden.yml b/.github/workflows/docker-cis-harden.yml
index 688d18c..6cec67b 100644
--- a/.github/workflows/docker-cis-harden.yml
+++ b/.github/workflows/docker-cis-harden.yml
@@ -135,7 +135,7 @@ jobs:
 
       - name: Upload InSpec reports
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: inspec-docker-harden-reports
           path: |
diff --git a/.github/workflows/docker-install.yml b/.github/workflows/docker-install.yml
index b8b4c9e..5197cb1 100644
--- a/.github/workflows/docker-install.yml
+++ b/.github/workflows/docker-install.yml
@@ -124,7 +124,7 @@ jobs:
 
       - name: Upload InSpec reports
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: inspec-docker-install-reports
           path: |
diff --git a/.github/workflows/dotnet.yml b/.github/workflows/dotnet.yml
index 759b3ed..a115167 100644
--- a/.github/workflows/dotnet.yml
+++ b/.github/workflows/dotnet.yml
@@ -63,7 +63,7 @@ jobs:
         run: docker save ${{ steps.meta.outputs.image }} -o image.tar
 
       - name: Upload image artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: docker-image
           path: image.tar
diff --git a/.github/workflows/grype.yml b/.github/workflows/grype.yml
index 4f6eebc..51d5a34 100644
--- a/.github/workflows/grype.yml
+++ b/.github/workflows/grype.yml
@@ -162,7 +162,7 @@ jobs:
 
       - name: Upload Grype results artifact
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: grype-sca-results
           path: |
diff --git a/.github/workflows/infrastructure-hardening.yml b/.github/workflows/infrastructure-hardening.yml
index cc83b5c..43c5927 100644
--- a/.github/workflows/infrastructure-hardening.yml
+++ b/.github/workflows/infrastructure-hardening.yml
@@ -124,7 +124,7 @@ jobs:
 
       - name: Upload InSpec report
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: inspec-linux-baseline
           path: linux-baseline.html
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 6b2da30..437b526 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -69,7 +69,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/syft.yml b/.github/workflows/syft.yml
index ab7bf51..5ee9dc5 100644
--- a/.github/workflows/syft.yml
+++ b/.github/workflows/syft.yml
@@ -66,7 +66,7 @@ jobs:
             -o table
 
       - name: Upload SBOM artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: sbom
           path: |
diff --git a/.github/workflows/trivy-sca.yml b/.github/workflows/trivy-sca.yml
index c150de7..72a5c07 100644
--- a/.github/workflows/trivy-sca.yml
+++ b/.github/workflows/trivy-sca.yml
@@ -117,7 +117,7 @@ jobs:
 
       - name: Upload Trivy SCA artifacts
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: trivy-sca-results
           path: |