diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8e84261..682f7fc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -117,7 +117,7 @@ jobs:
                   summary.write("No verified Reproducibility build and passing CI for this commit; building here.\n\n")
           PY
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         if: steps.verified.outputs.run_id != ''
         with:
           name: verified-release-${{ github.sha }}
@@ -208,7 +208,7 @@ jobs:
             exit 1
           fi
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           name: unsigned-release-${{ github.run_id }}-${{ github.run_attempt }}
           path: incoming
diff --git a/.github/workflows/reproducibility.yml b/.github/workflows/reproducibility.yml
index 8b03621..bdb7dee 100644
--- a/.github/workflows/reproducibility.yml
+++ b/.github/workflows/reproducibility.yml
@@ -122,7 +122,7 @@ jobs:
     runs-on: ubuntu-24.04
     timeout-minutes: 60
     steps:
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         if: needs.changes.outputs.relevant == 'true'
         with:
           pattern: rb-*