diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 01400df..69cbf51 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -57,7 +57,7 @@ jobs:
           fetch-depth: 0
 
       - name: Download coverage
-        uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           name: coverage
 
@@ -117,7 +117,7 @@ jobs:
           mkdir go-library-passwordsafe
 
       - name: Download library binary
-        uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           name: library
           path: go-library-passwordsafe
diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml
index 0aa3f34..1e8be7a 100644
--- a/.github/workflows/sonarqube.yml
+++ b/.github/workflows/sonarqube.yml
@@ -49,7 +49,7 @@ jobs:
           fetch-depth: 0
 
       - name: Download coverage
-        uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           name: coverage