diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 3c9c97ab6b9..700cea12fdd 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -75,7 +75,7 @@ jobs:
 
     - name: Upload coverage to Codecov
       if: ${{ matrix.update-coverage }}
-      uses: codecov/codecov-action@40a12dcee2df644d47232dde008099a3e9e4f865 #v3.1.2
+      uses: codecov/codecov-action@894ff025c7b54547a9a2a1e9f228beae737ad3c2 #v3.1.3
 
     - name: Ensure go generate produces a zero diff for update-urls
       shell: bash