diff --git a/.github/workflows/build-baseline.yml b/.github/workflows/build-baseline.yml
index b9fc5d5..814ef22 100644
--- a/.github/workflows/build-baseline.yml
+++ b/.github/workflows/build-baseline.yml
@@ -52,7 +52,7 @@ jobs:
       - name: Package Windows artifact
         run: python scripts/release/package_desktop_artifact.py
       - name: Upload Windows artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: bandscope-windows-${{ github.sha }}
           path: |
@@ -91,7 +91,7 @@ jobs:
       - name: Package macOS artifact
         run: python3 scripts/release/package_desktop_artifact.py
       - name: Upload macOS artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: bandscope-macos-${{ github.sha }}
           path: |
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index dc322eb..8af2054 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -46,13 +46,13 @@ jobs:
           output-file: bandscope-sbom.cdx.json
 
       - name: Upload SBOM artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: bandscope-sbom
           path: bandscope-sbom.cdx.json
 
       - name: Upload supplemental inventory artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: bandscope-supply-chain-inventory
           path: supply-chain/supplemental-component-inventory.json