diff --git a/.github/workflows/insiders.yml b/.github/workflows/insiders.yml
index 92ddc7e2fe16..2ed606db103e 100644
--- a/.github/workflows/insiders.yml
+++ b/.github/workflows/insiders.yml
@@ -497,7 +497,7 @@ jobs:
           mv .github/codecov.yml $GITHUB_WORKSPACE
 
       - name: Upload coverage to codecov
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@v2.0.3
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           file: ${{env.special-working-directory}}/coverage/cobertura-coverage.xml
diff --git a/.github/workflows/pr-check.yml b/.github/workflows/pr-check.yml
index fafbb61be550..ab3e91b7b1ee 100644
--- a/.github/workflows/pr-check.yml
+++ b/.github/workflows/pr-check.yml
@@ -497,7 +497,7 @@ jobs:
           mv .github/codecov.yml $GITHUB_WORKSPACE
 
       - name: Upload coverage to codecov
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@v2.0.3
         with:
           # Can't use the token to disambiguate since secrets aren't available from PR-triggered runs.
           #token: ${{ secrets.CODECOV_TOKEN }}