diff --git a/.github/workflows/js-mutation.yml b/.github/workflows/js-mutation.yml
index b668a3f6a..063c784c0 100644
--- a/.github/workflows/js-mutation.yml
+++ b/.github/workflows/js-mutation.yml
@@ -130,14 +130,14 @@ jobs:
           token: ${{ steps.bot-token.outputs.token || github.token }}
 
       - name: Download API mutation reports
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: stryker-api-*
           merge-multiple: true
           path: app/api/reports
 
       - name: Download UI mutation reports
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: stryker-ui-*
           merge-multiple: true