diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 5ac947b8d..95e14d901 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -19,7 +19,7 @@ jobs:
     permissions:
       # https://github.com/marketplace/actions/goreleaser-action
       contents: write
-      # actions/upload-artifact@v3
+      # actions/upload-artifact
       actions: write
     steps:
       - name: Checkout
@@ -51,7 +51,7 @@ jobs:
         env:
           GORELEASER_PREVIOUS_TAG: ${{steps.latest_version.outputs.release}}
       - name: Upload
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
         with:
           name: kubectl-datadog-linux
           path: |
@@ -64,7 +64,7 @@ jobs:
     permissions:
       # https://github.com/marketplace/actions/goreleaser-action
       contents: write
-      # actions/upload-artifact@v3
+      # actions/upload-artifact
       actions: write
     steps:
       - uses: actions/checkout@v3
@@ -92,7 +92,7 @@ jobs:
         env:
           GORELEASER_PREVIOUS_TAG: ${{steps.latest_version.outputs.release}}
       - name: Upload
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
         with:
           name: kubectl-datadog-darwin
           path: |
@@ -104,7 +104,7 @@ jobs:
     permissions:
       # https://github.com/marketplace/actions/goreleaser-action
       contents: write
-      # actions/upload-artifact@v3
+      # actions/upload-artifact
       actions: write
     steps:
       - uses: actions/checkout@v3
@@ -132,7 +132,7 @@ jobs:
         env:
           GORELEASER_PREVIOUS_TAG: ${{steps.latest_version.outputs.release}}
       - name: Upload
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
         with:
           name: kubectl-datadog-windows
           path: |
@@ -146,7 +146,7 @@ jobs:
       # https://github.com/marketplace/actions/goreleaser-action
       # https://github.com/softprops/action-gh-release?tab=readme-ov-file#permissions 
       contents: write
-      # actions/download-artifact@v3
+      # actions/download-artifact
       actions: read
       # rajatjindal/krew-release-bot@v0.0.43
       pull-requests: write
@@ -161,17 +161,17 @@ jobs:
           mkdir -p ./dist/darwin
           mkdir -p ./dist/windows
       - name: Download linux binaries
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           name: kubectl-datadog-linux
           path: ./tmp-build/linux
       - name: Download darwin binaries
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           name: kubectl-datadog-darwin
           path: ./tmp-build/darwin
       - name: Download windows binaries
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           name: kubectl-datadog-windows
           path: ./tmp-build/windows