diff --git a/.github/workflows/echidna.yaml b/.github/workflows/echidna.yaml
index 0f82457d..87ef341b 100644
--- a/.github/workflows/echidna.yaml
+++ b/.github/workflows/echidna.yaml
@@ -72,7 +72,7 @@ jobs:
           test-mode: property
 
       - name: Upload corpus
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         if: always()
         with:
           name: echidna-corpus-${{ matrix.contract }}
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 8cc13825..038f0f26 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -39,14 +39,14 @@ jobs:
         continue-on-error: false
 
       - name: Upload gas report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: gas-report
           path: gas-report.json
           retention-days: 30
 
       - name: Upload gas comparison report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: gas-compare
           path: gas-compare.txt