diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d038b5244abc5..77dd68ac43717 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -104,7 +104,7 @@ jobs:
           persist-credentials: false
 
       - name: Download Stats (HEAD)
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: webpack-stats
           path: head-stats
@@ -121,7 +121,7 @@ jobs:
       - name: Download Stats (BASE)
         id: base-stats
         continue-on-error: true
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: webpack-stats
           path: base-stats
diff --git a/.github/workflows/leave-comment.yml b/.github/workflows/leave-comment.yml
index c7b29b3bb72e9..73256fd7c4c58 100644
--- a/.github/workflows/leave-comment.yml
+++ b/.github/workflows/leave-comment.yml
@@ -39,7 +39,7 @@ jobs:
         # allowed to fail and every subsequent step is gated on it having succeeded.
         id: download
         continue-on-error: true
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: pr-comment
           path: pr-comment