diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 180fb6fb..c1e1d2ba 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -61,13 +61,13 @@ jobs:
         run: nox --session '${{ matrix.session }}'
       - if: success() || failure()
         name: Upload Coverage
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6
         with:
           report_type: coverage
           use_oidc: true
       - if: success() || failure()
         name: Upload Test Results
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6
         with:
           report_type: test_results
           use_oidc: true