diff --git a/.github/workflows/e2e-tests.yml b/.github/workflows/e2e-tests.yml
index d08fa967d..3161c1657 100644
--- a/.github/workflows/e2e-tests.yml
+++ b/.github/workflows/e2e-tests.yml
@@ -211,13 +211,13 @@ jobs:
           TURBO_TEAM: ${{ vars.TURBO_TEAM }}
           CYPRESS_CONTAINER_ID: ${{ matrix.containers }}
 
-      - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # master
+      - uses: actions/upload-artifact@v4.6.2 # master
         if: always()
         with:
           name: screenlog-${{ matrix.containers }}
           path: frontend/screenlog.0
 
-      - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # master
+      - uses: actions/upload-artifact@v4.6.2
         if: always()
         with:
           name: screenshots-${{ matrix.containers }}
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 109700b3c..1b98993e7 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -52,7 +52,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@v4.6.2 # v4.4.3
         with:
           name: SARIF file
           path: results.sarif