diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
index ebb384cfe..b94f63387 100644
--- a/.github/workflows/merge.yml
+++ b/.github/workflows/merge.yml
@@ -49,7 +49,7 @@ jobs:
       run: mvn --batch-mode --update-snapshots verify
 
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@de1b515b0f8eadbfbf02b7a59f70bbb4ce92f4b2
+      uses: codecov/codecov-action@6991c70c83e2c91b0e25fcd450deaf32bb17a653
       with:
         token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
         flags: unittests # optional
diff --git a/.github/workflows/pullrequest.yml b/.github/workflows/pullrequest.yml
index 5c29536ef..c1e2afc55 100644
--- a/.github/workflows/pullrequest.yml
+++ b/.github/workflows/pullrequest.yml
@@ -36,7 +36,7 @@ jobs:
         run: mvn --batch-mode --update-snapshots --activate-profiles e2e verify
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@de1b515b0f8eadbfbf02b7a59f70bbb4ce92f4b2
+        uses: codecov/codecov-action@6991c70c83e2c91b0e25fcd450deaf32bb17a653
         with:
           token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
           flags: unittests # optional