diff --git a/.github/workflows/oracle-reproducibility.yml b/.github/workflows/oracle-reproducibility.yml
index d2c4966..99a55cd 100644
--- a/.github/workflows/oracle-reproducibility.yml
+++ b/.github/workflows/oracle-reproducibility.yml
@@ -45,11 +45,11 @@ jobs:
     needs: build
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: oracle-build-one
           path: one
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: oracle-build-two
           path: two
diff --git a/.github/workflows/release-quality.yml b/.github/workflows/release-quality.yml
index 152b292..13982e2 100644
--- a/.github/workflows/release-quality.yml
+++ b/.github/workflows/release-quality.yml
@@ -73,9 +73,9 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with: { name: release-build-one, path: one }
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with: { name: release-build-two, path: two }
       - run: python3 scripts/release/compare-builds.py one two
       - run: python3 scripts/quality/verify-report.py quality/gas-storage-report.json one/release-manifest.json