diff --git a/.github/workflows/container-image.yml b/.github/workflows/container-image.yml
index 8958fd0a..84fc350f 100644
--- a/.github/workflows/container-image.yml
+++ b/.github/workflows/container-image.yml
@@ -36,7 +36,7 @@ jobs:
           args: --release --target ${{matrix.targetarch}}-unknown-linux-musl
 
       - name: Upload policy-server binary
-        uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
         with:
           name: policy-server-${{ matrix.targetarch }}
           path: |
@@ -70,12 +70,12 @@ jobs:
 
       # Download the policy-server artifacts we've built inside of the previous job
       - name: Download policy-server-x86_64 artifact
-        uses: actions/download-artifact@8caf195ad4b1dee92908e23f56eeb0696f1dd42d # v4.1.5
+        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # v4.1.6
         with:
           name: policy-server-x86_64
           path: artifacts-x86_64
       - name: Download policy-server-aarch64 artifact
-        uses: actions/download-artifact@8caf195ad4b1dee92908e23f56eeb0696f1dd42d # v4.1.5
+        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # v4.1.6
         with:
           name: policy-server-aarch64
           path: artifacts-aarch64
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e172c54a..09523f0b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -74,7 +74,7 @@ jobs:
         uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
 
       - name: Download SBOM artifact
-        uses: actions/download-artifact@8caf195ad4b1dee92908e23f56eeb0696f1dd42d # v4.1.5
+        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # v4.1.6
         with:
           pattern: sbom-*
           path: ./
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index bcae7bc0..e6a17e58 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -81,7 +81,7 @@ jobs:
             ghcr.io/${{github.repository_owner}}/policy-server:${SBOM_TAG}
 
       - name: Upload SBOMs as artifacts
-        uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
         with:
           name: sbom-${{ matrix.arch }}
           path: policy-server-sbom-${{ matrix.arch }}*