diff --git a/.github/workflows/builds.yml b/.github/workflows/builds.yml
index d4b006aedbdb..2a7955847966 100644
--- a/.github/workflows/builds.yml
+++ b/.github/workflows/builds.yml
@@ -765,7 +765,7 @@ jobs:
           cd ../libhtp/htp
           gcov-9 -p *.[ch]
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@81cd2dc8148241f03f5839d295e000b8f761e378
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d
         with:
           fail_ci_if_error: false
           flags: suricata-verify
@@ -841,7 +841,7 @@ jobs:
           cd ../libhtp/htp
           gcov-9 -p *.[ch]
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@81cd2dc8148241f03f5839d295e000b8f761e378
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d
         with:
           fail_ci_if_error: false
           flags: unittests
@@ -921,7 +921,7 @@ jobs:
           cd src
           llvm-cov-10 gcov -p *.c
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@81cd2dc8148241f03f5839d295e000b8f761e378
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d
         with:
           fail_ci_if_error: false
           flags: fuzzcorpus