diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index 584b937..cbc458f 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -106,7 +106,7 @@ jobs:
           category: trivy-app-linux-arm64-${{ matrix.tag }}
 
       - name: Save vulnerability reports
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: trivy-app-${{ matrix.tag }}
           path: trivy-results/*.sarif
@@ -158,7 +158,7 @@ jobs:
           category: trivy-web-linux-arm64
 
       - name: Save vulnerability reports
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: trivy-web
           path: trivy-results/*.sarif