diff --git a/.github/workflows/operator.yml b/.github/workflows/operator.yml
index 7c539f5b7..2280d2fa6 100644
--- a/.github/workflows/operator.yml
+++ b/.github/workflows/operator.yml
@@ -330,7 +330,7 @@ jobs:
           MINIO_NAMESPACE=minio-tls MINIO_USE_TLS=1 ./hack/run-minio.sh
 
       - name: Load operator container artifact
-        uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1
+        uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
         with:
           name: volsync-operator
           path: /tmp
@@ -355,7 +355,7 @@ jobs:
               volsync-ghaction ./helm/volsync
 
       - name: Load cli artifact
-        uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1
+        uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
         with:
           name: kubectl-volsync
           path: bin
diff --git a/.github/workflows/registry-push.yml b/.github/workflows/registry-push.yml
index 7c6342ee9..abbfc6b8b 100644
--- a/.github/workflows/registry-push.yml
+++ b/.github/workflows/registry-push.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Load container artifact
-        uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1
+        uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
         with:
           name: ${{ inputs.artifact-name }}
           path: /tmp