diff --git a/.github/workflows/conformance-tests.yml b/.github/workflows/conformance-tests.yml
index 53719aa..608b1ea 100644
--- a/.github/workflows/conformance-tests.yml
+++ b/.github/workflows/conformance-tests.yml
@@ -86,13 +86,13 @@ jobs:
           ./build-test-bundles.sh
 
       - name: Upload shim
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: containerd-shim-verified-container-v1
           path: implementations/containerd-shim/target/release/containerd-shim-verified-container-v1
 
       - name: Upload bundles
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: test-bundles
           path: vectors/runtime-integration/*.ctp
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
index f2bf132..a5c0ac9 100644
--- a/.github/workflows/hypatia-scan.yml
+++ b/.github/workflows/hypatia-scan.yml
@@ -75,7 +75,7 @@ jobs:
           echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY
 
       - name: Upload findings artifact
-        uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
         with:
           name: hypatia-findings
           path: hypatia-findings.json
diff --git a/.github/workflows/test-implementations.yml b/.github/workflows/test-implementations.yml
index 9062b30..c169fc5 100644
--- a/.github/workflows/test-implementations.yml
+++ b/.github/workflows/test-implementations.yml
@@ -35,7 +35,7 @@ jobs:
           cargo test
 
       - name: Upload shim binary
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: containerd-shim-verified-container-v1
           path: implementations/containerd-shim/target/release/containerd-shim-verified-container-v1
@@ -88,7 +88,7 @@ jobs:
           test -f missing-attestations.ctp
 
       - name: Upload test bundles
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: test-bundles
           path: vectors/runtime-integration/*.ctp