diff --git a/.github/workflows/gradle-check-build.yml b/.github/workflows/gradle-check-build.yml
index 6245826..a9e461d 100644
--- a/.github/workflows/gradle-check-build.yml
+++ b/.github/workflows/gradle-check-build.yml
@@ -45,7 +45,7 @@ jobs:
         run: ./gradlew buildWar
         # coverage reports in PR comment if modified
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c # v4.4.1
+        uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
       # prepare docke environment with caching of images and buildx
diff --git a/.github/workflows/vulnerability-scans.yml b/.github/workflows/vulnerability-scans.yml
index a8a5950..b1d8764 100644
--- a/.github/workflows/vulnerability-scans.yml
+++ b/.github/workflows/vulnerability-scans.yml
@@ -57,7 +57,7 @@ jobs:
         # Saves minutes, fails fast
         run: ./gradlew war
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c # v4.4.1
+        uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
       # gets cache