diff --git a/.github/workflows/update-reproducibility.yml b/.github/workflows/update-reproducibility.yml
index f8adbd2e..181ac4dd 100644
--- a/.github/workflows/update-reproducibility.yml
+++ b/.github/workflows/update-reproducibility.yml
@@ -58,7 +58,7 @@ jobs:
 
       # One artifact per failed arch. `gh run download` doesn't work: https://github.com/cli/cli/issues/13012
       - name: Download the digests of the failed CI run
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           github-token: ${{ github.token }}
           run-id: ${{ steps.ci.outputs.run }}