diff --git a/.github/workflows/monthly_publish.yml b/.github/workflows/monthly_publish.yml
index 275fc82..19b920a 100644
--- a/.github/workflows/monthly_publish.yml
+++ b/.github/workflows/monthly_publish.yml
@@ -105,7 +105,7 @@ jobs:
         run: cat data/output/monthly_report_bundle/job_summary.md >> "$GITHUB_STEP_SUMMARY"
 
       - name: Upload Monthly Report Artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: ${{ steps.monthly-report.outputs.artifact_name }}
           path: data/output/monthly_report_bundle
@@ -301,7 +301,7 @@ jobs:
 
       - name: Archive review verdict even when escalation is unavailable
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: monthly-review-verdict-${{ github.run_id }}-${{ github.run_attempt }}
           path: data/output/monthly_review_verdict.json
diff --git a/.github/workflows/publish-lifecycle-inputs.yml b/.github/workflows/publish-lifecycle-inputs.yml
index ac63267..49d3bc3 100644
--- a/.github/workflows/publish-lifecycle-inputs.yml
+++ b/.github/workflows/publish-lifecycle-inputs.yml
@@ -53,7 +53,7 @@ jobs:
             --output-dir "${RUNNER_TEMP}/crypto-lifecycle-inputs"
 
       - name: Upload lifecycle inputs
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: crypto-lifecycle-inputs-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ runner.temp }}/crypto-lifecycle-inputs
diff --git a/tests/test_monthly_publish_workflow_config.py b/tests/test_monthly_publish_workflow_config.py
index 86f6813..040d224 100644
--- a/tests/test_monthly_publish_workflow_config.py
+++ b/tests/test_monthly_publish_workflow_config.py
@@ -18,20 +18,20 @@
 PINNED_ACTIONS = (
     "actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6",
     "actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6",
-    "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7",
+    "actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7",
 )
 EXPECTED_REMOTE_ACTIONS = {
     WORKFLOW_PATH: {
         "actions/checkout": ("d23441a48e516b6c34aea4fa41551a30e30af803", "v6"),
         "actions/setup-python": ("ece7cb06caefa5fff74198d8649806c4678c61a1", "v6"),
-        "actions/upload-artifact": ("043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", "v7"),
+        "actions/upload-artifact": ("cf430e030ddbb5b0abf93d22962f4752f3646cd9", "v7"),
         "actions/download-artifact": ("9000827ccba6bdab643e8b6fd33ac0654aef8333", "v8"),
         "google-github-actions/auth": ("7c6bc770dae815cd3e89ee6cdf493a5fab2cc093", "v3"),
     },
     LIFECYCLE_WORKFLOW_PATH: {
         "actions/checkout": ("d23441a48e516b6c34aea4fa41551a30e30af803", "v6"),
         "actions/setup-python": ("ece7cb06caefa5fff74198d8649806c4678c61a1", "v6"),
-        "actions/upload-artifact": ("043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", "v7"),
+        "actions/upload-artifact": ("cf430e030ddbb5b0abf93d22962f4752f3646cd9", "v7"),
     },
 }