diff --git a/.github/workflows/gotest.yml b/.github/workflows/gotest.yml
index e0815bf90402f4dc7d811ec8dcaa9953cb998414..a5eb4ac8d99075d9419e5594a58b20360c615a35 100644
--- a/.github/workflows/gotest.yml
+++ b/.github/workflows/gotest.yml
@@ -45,7 +45,7 @@ jobs:
           make -j "$PARALLEL" test/unit/gotest.junit.xml &&
             [[ ! $(jq -s -c 'map(select(.Action == "fail")) | .[]' test/unit/gotest.json) ]]
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
         if: failure() || success()
         with:
           name: unittests
diff --git a/.github/workflows/sharness.yml b/.github/workflows/sharness.yml
index 86f08b2c101d07cce3d65f61ab698e12bbd9b28c..62725e9b454d0bd7e5e3ea1f4a2757bcf36a713c 100644
--- a/.github/workflows/sharness.yml
+++ b/.github/workflows/sharness.yml
@@ -55,7 +55,7 @@ jobs:
           # increasing parallelism beyond 10 doesn't speed up the tests much
           PARALLEL: ${{ github.repository == 'ipfs/kubo' && 10 || 3 }}
       - name: Upload coverage report
-        uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
         if: failure() || success()
         with:
           name: sharness