diff --git a/.github/workflows/automated-workflow-fixes.yml b/.github/workflows/automated-workflow-fixes.yml
index 37d62d938..9f2384c57 100644
--- a/.github/workflows/automated-workflow-fixes.yml
+++ b/.github/workflows/automated-workflow-fixes.yml
@@ -397,7 +397,7 @@ jobs:
       - name: Download link check artifacts
         if: always()
         continue-on-error: true
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: link-check-artifacts
           path: .github/automation-reports/link-check-artifacts
@@ -405,7 +405,7 @@ jobs:
       - name: Download markdownlint artifacts
         if: always()
         continue-on-error: true
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: markdownlint-artifacts
           path: .github/automation-reports/markdownlint-artifacts
@@ -413,7 +413,7 @@ jobs:
       - name: Download cspell artifacts
         if: always()
         continue-on-error: true
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: cspell-artifacts
           path: .github/automation-reports/cspell-artifacts
@@ -421,7 +421,7 @@ jobs:
       - name: Download CLI path artifacts
         if: always()
         continue-on-error: true
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: cli-command-path-artifacts
           path: .github/automation-reports/cli-command-path-artifacts
@@ -429,7 +429,7 @@ jobs:
       - name: Download ReadMe constraints artifacts
         if: always()
         continue-on-error: true
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: readme-docs-constraints-report
           path: .github/automation-reports/readme-docs-constraints-report
@@ -437,7 +437,7 @@ jobs:
       - name: Download dependency monitor artifacts
         if: always()
         continue-on-error: true
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: dependency-monitor-report
           path: .github/automation-reports/dependency-monitor-report
diff --git a/.github/workflows/reusable-cli-command-path-check.yml b/.github/workflows/reusable-cli-command-path-check.yml
index caa485044..0c858dda8 100644
--- a/.github/workflows/reusable-cli-command-path-check.yml
+++ b/.github/workflows/reusable-cli-command-path-check.yml
@@ -370,7 +370,7 @@ jobs:
           persist-credentials: true
 
       - name: Download matrix artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.1
         with:
           pattern: cli-command-path-artifacts-*
           path: .github/cli-command-paths