diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index e85eadbf..95cf1475 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -51,7 +51,7 @@ jobs:
         with:
           disable-sudo: true
           egress-policy: audit
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           merge-multiple: true
           pattern: test-results-*
diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
index 16078d50..8e68da5d 100644
--- a/.github/workflows/release-build.yml
+++ b/.github/workflows/release-build.yml
@@ -134,7 +134,7 @@ jobs:
         with:
           disable-sudo: true
           egress-policy: audit
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           pattern: documents
       - name: Upload documents to release
diff --git a/.github/workflows/wc-build-push.yml b/.github/workflows/wc-build-push.yml
index 9e98fdf9..10207f3a 100644
--- a/.github/workflows/wc-build-push.yml
+++ b/.github/workflows/wc-build-push.yml
@@ -166,7 +166,7 @@ jobs:
         with:
           disable-sudo: true
           egress-policy: audit
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           path: ${{ runner.temp }}/digests
           pattern: digests-${{ needs.sanitize-image-name.outputs.image-basename }}-*