diff --git a/.github/workflows/witness.yml b/.github/workflows/witness.yml
index 37dc08a7..85867132 100644
--- a/.github/workflows/witness.yml
+++ b/.github/workflows/witness.yml
@@ -61,7 +61,7 @@ jobs:
               go-version: 1.22.x
 
           - if: ${{ inputs.artifact-download != '' }}
-            uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+            uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
             with:
               name: ${{ inputs.artifact-download }}
               path: /tmp