diff --git a/.github/workflows/lint-build-test.yml b/.github/workflows/lint-build-test.yml
index b26f378f..08d89a8f 100644
--- a/.github/workflows/lint-build-test.yml
+++ b/.github/workflows/lint-build-test.yml
@@ -226,7 +226,7 @@ jobs:
           is-high-risk-environment: false
           node-version: ${{ matrix.node-version }}
       - name: Restore build artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.1
         with:
           name: package-dist-${{ github.sha }}
           path: packages
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 1d6b35cb..4b02da6a 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -157,7 +157,7 @@ jobs:
         uses: actions/checkout@v7
       - name: Restore build artifacts
         if: needs.check-release.outputs.IS_RELEASE_PR == 'true'
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.1
         with:
           name: package-dist-${{ github.sha }}
           path: packages
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 76e6ff62..cd98c87b 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -137,7 +137,7 @@ jobs:
           is-high-risk-environment: true
           ref: ${{ github.sha }}
       - name: Restore build artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.1
         with:
           name: publish-release-artifacts-${{ github.sha }}
       - name: Dry run publish to NPM
@@ -161,7 +161,7 @@ jobs:
           is-high-risk-environment: true
           ref: ${{ github.sha }}
       - name: Restore build artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.1
         with:
           name: publish-release-artifacts-${{ github.sha }}
       - name: Publish to NPM
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index c559afbf..df99a819 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -26,7 +26,7 @@ jobs:
 
       - name: Download coverage artifacts
         # This is actions/download-artifact@v7
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           pattern: coverage-*
           path: .coverage-artifacts