diff --git a/.github/workflows/third_party_checks.yml b/.github/workflows/third_party_checks.yml
index f517a78..83ef213 100644
--- a/.github/workflows/third_party_checks.yml
+++ b/.github/workflows/third_party_checks.yml
@@ -48,7 +48,7 @@ jobs:
 
       - name: Upload coverage report to Codecov
         if: "! github.event.pull_request.head.repo.fork "
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true
@@ -57,7 +57,7 @@ jobs:
         if: >-
           github.event_name == 'pull_request' &&
           github.event.pull_request.head.repo.full_name != github.repository
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
         with:
           fail_ci_if_error: true