diff --git a/.github/workflows/kube-flux-diff.yaml b/.github/workflows/kube-flux-diff.yaml
index c8cbf200..4152c04e 100644
--- a/.github/workflows/kube-flux-diff.yaml
+++ b/.github/workflows/kube-flux-diff.yaml
@@ -58,7 +58,7 @@ jobs:
           jq -c -n '$ARGS.positional' --args "${splitfiles[@]}" >> "$GITHUB_OUTPUT"
 
       - name: Upload Splits
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5
         with:
           name: "${{ steps.split.outputs.artifact }}"
           path: split/final
@@ -85,7 +85,7 @@ jobs:
           app-id: "${{ secrets.BOT_APP_ID }}" # $BOT_APP_ID is found in GitHub App main settings page
           private-key: "${{ secrets.BOT_JWT_PRIVATE_KEY }}" # $BOT_JWT_PRIVATE_KEY is generated in GitHub App main settings page, uses the X.509 private key format
       - name: Download Splits
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
         with:
           name: "${{ needs.flux-diff.outputs.artifact }}"
       - run: |