diff --git a/.github/actions/build-image/action.yaml b/.github/actions/build-image/action.yaml
index f1ff11535c..9c75947c18 100644
--- a/.github/actions/build-image/action.yaml
+++ b/.github/actions/build-image/action.yaml
@@ -45,7 +45,7 @@ runs:
         labels: ${{ inputs.labels }}
         outputs: type=docker,dest=/tmp/operator-${{ inputs.platform }}.tar
     - name: Upload artifact
-      uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
+      uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
       with:
         name: operator-${{ inputs.platform }}
         path: /tmp/operator-${{ inputs.platform }}.tar
diff --git a/.github/actions/preflight/action.yaml b/.github/actions/preflight/action.yaml
index dc0843b0c9..a4208093f4 100644
--- a/.github/actions/preflight/action.yaml
+++ b/.github/actions/preflight/action.yaml
@@ -33,7 +33,7 @@ runs:
     run: |
       hack/build/ci/preflight.sh "${{ env.PREFLIGHT_VERSION }}" "${{ env.IMAGE_URI}}" "${{ inputs.report-name }}"
   - name: Upload report
-    uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
+    uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
     with:
       name: preflight-report
       path: ${{ inputs.report-name }}
diff --git a/.github/workflows/openssf-scorecards.yaml b/.github/workflows/openssf-scorecards.yaml
index 219c25f806..d5c62d5ff1 100644
--- a/.github/workflows/openssf-scorecards.yaml
+++ b/.github/workflows/openssf-scorecards.yaml
@@ -48,7 +48,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
         with:
           name: SARIF file
           path: results.sarif