diff --git a/.github/workflows/compatibility-e2e-v1.yml b/.github/workflows/compatibility-e2e-v1.yml
index e2a8e857ca1..3668ce93c40 100644
--- a/.github/workflows/compatibility-e2e-v1.yml
+++ b/.github/workflows/compatibility-e2e-v1.yml
@@ -181,7 +181,7 @@ jobs:
           flags: ${{ matrix }}-compatibility-e2etests
 
       - name: Upload Logs
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         if: always()
         with:
           name: ${{ matrix.module }}-compatibility-e2e-tests-logs
diff --git a/.github/workflows/compatibility-e2e-v2.yml b/.github/workflows/compatibility-e2e-v2.yml
index 99d7afdf8e8..18e19815750 100644
--- a/.github/workflows/compatibility-e2e-v2.yml
+++ b/.github/workflows/compatibility-e2e-v2.yml
@@ -162,7 +162,7 @@ jobs:
           flags: e2etests
 
       - name: Upload Logs
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         if: always()
         with:
           name: ${{ matrix.module }}-e2e-tests-logs
diff --git a/.github/workflows/e2e-v1-nydus.yml b/.github/workflows/e2e-v1-nydus.yml
index ff677fb5ac0..9d7e5880a91 100644
--- a/.github/workflows/e2e-v1-nydus.yml
+++ b/.github/workflows/e2e-v1-nydus.yml
@@ -146,7 +146,7 @@ jobs:
           docker exec kind-control-plane journalctl -u kubelet >> $log_dir/kubelet.log
 
       - name: Upload Logs
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         if: always()
         with:
           name: nydus-e2e-tests-logs
diff --git a/.github/workflows/e2e-v1.yml b/.github/workflows/e2e-v1.yml
index 8e86a4188b4..c897d9c6f5d 100644
--- a/.github/workflows/e2e-v1.yml
+++ b/.github/workflows/e2e-v1.yml
@@ -196,7 +196,7 @@ jobs:
           flags: e2etests
 
       - name: Upload Logs
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         if: always()
         with:
           name: ${{ matrix.module }}-e2e-tests-logs
diff --git a/.github/workflows/e2e-v2-nydus.yml b/.github/workflows/e2e-v2-nydus.yml
index abb4dd36c2e..ca2b92299b3 100644
--- a/.github/workflows/e2e-v2-nydus.yml
+++ b/.github/workflows/e2e-v2-nydus.yml
@@ -169,7 +169,7 @@ jobs:
           done
 
       - name: Upload Logs
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         if: always()
         with:
           name: nydus-e2e-tests-logs
diff --git a/.github/workflows/e2e-v2-rate-limit.yml b/.github/workflows/e2e-v2-rate-limit.yml
index 883cce80489..6a40483f9be 100644
--- a/.github/workflows/e2e-v2-rate-limit.yml
+++ b/.github/workflows/e2e-v2-rate-limit.yml
@@ -145,7 +145,7 @@ jobs:
           flags: e2etests
 
       - name: Upload Logs
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         if: always()
         with:
           name: ${{ matrix.module }}-e2e-tests-logs
diff --git a/.github/workflows/e2e-v2.yml b/.github/workflows/e2e-v2.yml
index 40253169058..54550bd324b 100644
--- a/.github/workflows/e2e-v2.yml
+++ b/.github/workflows/e2e-v2.yml
@@ -146,7 +146,7 @@ jobs:
           flags: e2etests
 
       - name: Upload Logs
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         if: always()
         with:
           name: ${{ matrix.module }}-e2e-tests-logs
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 8d03b7563df..6ada7119828 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -55,7 +55,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: SARIF file
           path: results.sarif