diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml
index a0e6bc3b6541..1bbef96c0aa7 100644
--- a/.github/workflows/build-and-test.yml
+++ b/.github/workflows/build-and-test.yml
@@ -339,7 +339,7 @@ jobs:
           merge-multiple: true
           pattern: coverage-artifacts-*
       - name: Upload coverage report
-        uses: codecov/codecov-action@05f5a9cfad807516dbbef9929c4a42df3eb78766 # 5.0.3
+        uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # 5.0.7
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}