diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6d66920b..cb0e61a9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -55,7 +55,7 @@ jobs:
       - name: Controller unit tests (excluding bgctl and e2e)
         run: make test-controller
       - name: Upload coverage
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
         if: always()
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
@@ -78,7 +78,7 @@ jobs:
       - name: bgctl e2e tests (mocked)
         run: make test-cli-e2e
       - name: Upload coverage
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
         if: always()
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
@@ -330,7 +330,7 @@ jobs:
       - name: Unit tests
         run: npm run test:coverage
       - name: Upload frontend coverage
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
         if: always()
         with:
           token: ${{ secrets.CODECOV_TOKEN }}