diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 7c07059b..d3f787cf 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -227,7 +227,7 @@ jobs:
         run: python3 scripts/check-bench-budgets.py onchain/bench-output.txt
 
       - name: Upload bench artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: bench-output
           path: onchain/bench-output.txt
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index dda927e7..7acabf79 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -125,7 +125,7 @@ jobs:
 
       - name: Upload SARIF artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: gitleaks-sarif
           path: gitleaks.sarif