diff --git a/.github/workflows/publish_pipedv1_exp.yaml b/.github/workflows/publish_pipedv1_exp.yaml
index 5b2db71a0a..0073a0e813 100644
--- a/.github/workflows/publish_pipedv1_exp.yaml
+++ b/.github/workflows/publish_pipedv1_exp.yaml
@@ -109,7 +109,7 @@ jobs:
           touch "/tmp/digests/${digest#sha256:}"
 
       - name: Upload digest
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: digests-pipedv1-exp-${{ matrix.platform.arch }}-${{ matrix.container_registry == 'ghcr.io/pipe-cd' && 'ghcr' || 'gcr' }}
           path: /tmp/digests/*