diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b6f9bd0..3e73607 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -61,7 +61,7 @@ jobs:
           GOARCH: ${{ matrix.arch }}
           CGO_ENABLED: '0'
         run: go build -buildvcs=false -trimpath -ldflags="-s -w -buildid= -X main.version=${GITHUB_REF_NAME}" -o "cdx-${GOOS}-${GOARCH}${{ matrix.suffix }}" ./cmd/cdx
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: cdx-${{ matrix.os }}-${{ matrix.arch }}
           path: cdx-*