diff --git a/.github/workflows/auto-promote.yaml b/.github/workflows/auto-promote.yaml
index 198ab24..8dd20ad 100644
--- a/.github/workflows/auto-promote.yaml
+++ b/.github/workflows/auto-promote.yaml
@@ -63,7 +63,7 @@ jobs:
       - name: Download version-under-test and run-completeness artifacts
         id: artifact
         continue-on-error: true
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: version-under-test
           run-id: ${{ github.event.workflow_run.id }}
diff --git a/.github/workflows/drift-comment.yaml b/.github/workflows/drift-comment.yaml
index a65c79f..acca83e 100644
--- a/.github/workflows/drift-comment.yaml
+++ b/.github/workflows/drift-comment.yaml
@@ -33,7 +33,7 @@ jobs:
       - name: Download drift result
         id: download
         continue-on-error: true
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: drift-result
           path: drift-result
diff --git a/.github/workflows/fleet-reconcile.yaml b/.github/workflows/fleet-reconcile.yaml
index 24a715a..00631ba 100644
--- a/.github/workflows/fleet-reconcile.yaml
+++ b/.github/workflows/fleet-reconcile.yaml
@@ -131,7 +131,7 @@ jobs:
       - name: Download run-ledger artifacts
         id: ledger
         continue-on-error: true
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: ${{ inputs.ledger-artifact }}
           path: ${{ runner.temp }}/ledger-artifacts