diff --git a/.github/workflows/controlled-images.yml b/.github/workflows/controlled-images.yml
index 820f74f..72543c5 100644
--- a/.github/workflows/controlled-images.yml
+++ b/.github/workflows/controlled-images.yml
@@ -68,7 +68,7 @@ jobs:
           python3 scripts/qualify-controlled.py --image "$image" --profile "$PROFILE" --output "$RUNNER_TEMP/zd-qualification"
       - name: Retain qualification evidence
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: zd-${{ matrix.profile }}-${{ matrix.runtime.version }}-${{ matrix.runtime.patch }}
           path: ${{ runner.temp }}/zd-qualification