diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a553e2097..b4996635b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -227,7 +227,7 @@ jobs:
         if: ${{ needs.checks.outputs.binary_cache_hit != 'true' }}
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e # v5.1.1
+        uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
         with:
           files: ./coverage.txt
           token: ${{ secrets.CODECOV_TOKEN }} # required
diff --git a/.github/workflows/regression.yml b/.github/workflows/regression.yml
index d518f8251..e908e7f1b 100644
--- a/.github/workflows/regression.yml
+++ b/.github/workflows/regression.yml
@@ -99,7 +99,7 @@ jobs:
         run: make cover
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e # v5.1.1
+        uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
         with:
           files: ./coverage.txt
           token: ${{ secrets.CODECOV_TOKEN }} # required