diff --git a/.github/workflows/CWI.yml b/.github/workflows/CWI.yml
index 9ba7965c26b..1b102c37aa8 100644
--- a/.github/workflows/CWI.yml
+++ b/.github/workflows/CWI.yml
@@ -133,7 +133,7 @@ jobs:
           cache: true
 
       - name: Download Windows binary
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c   # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333   # v8.0.2
         with:
           name: gh-aw-windows-amd64
 
diff --git a/.github/workflows/cgo.yml b/.github/workflows/cgo.yml
index 4a2aafe9d87..4719570dc96 100644
--- a/.github/workflows/cgo.yml
+++ b/.github/workflows/cgo.yml
@@ -377,7 +377,7 @@ jobs:
         echo "Found $(wc -l < all-tests.txt) unit tests in codebase"
 
     - name: Download unit test result artifacts
-      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c   # v8.0.1
+      uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333   # v8.0.2
       with:
         path: test-results
         pattern: test-result-cgo-unit-*
@@ -2056,7 +2056,7 @@ jobs:
         persist-credentials: false
 
     - name: Download gh-aw binary
-      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c   # v8.0.1
+      uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333   # v8.0.2
       with:
         name: gh-aw-linux-amd64
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index eab60b0039b..2a3d20021cc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -603,7 +603,7 @@ jobs:
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1   # v7.0.1
 
     - name: Download gh-aw binary artifact
-      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c   # v8.0.1
+      uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333   # v8.0.2
       with:
         name: gh-aw-linux-amd64
         path: .
@@ -632,7 +632,7 @@ jobs:
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1   # v7.0.1
 
     - name: Download gh-aw binary artifact
-      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c   # v8.0.1
+      uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333   # v8.0.2
       with:
         name: gh-aw-linux-amd64
         path: .
@@ -1072,7 +1072,7 @@ jobs:
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1   # v7.0.1
 
     - name: Download gh-aw binary artifact
-      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c   # v8.0.1
+      uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333   # v8.0.2
       with:
         name: gh-aw-linux-amd64
         path: .
diff --git a/.github/workflows/daily-work-queue-formal-verification.lock.yml b/.github/workflows/daily-work-queue-formal-verification.lock.yml
index 3b0e39336dd..45ffe65cee5 100644
--- a/.github/workflows/daily-work-queue-formal-verification.lock.yml
+++ b/.github/workflows/daily-work-queue-formal-verification.lock.yml
@@ -513,7 +513,7 @@ jobs:
           name: activation
           path: /tmp/gh-aw
       - name: Download verification evidence
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: /tmp/gh-aw/agent/work-queue-formal/evidence
           pattern: work-queue-formal-*
diff --git a/.github/workflows/windows-cli-integration.yml b/.github/workflows/windows-cli-integration.yml
index 5abdda4b47b..17bb601032f 100644
--- a/.github/workflows/windows-cli-integration.yml
+++ b/.github/workflows/windows-cli-integration.yml
@@ -59,7 +59,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Download Windows binary
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: gh-aw-windows-amd64