diff --git a/.github/workflows/witness.yml b/.github/workflows/witness.yml
index 27621d1d..749f70b8 100644
--- a/.github/workflows/witness.yml
+++ b/.github/workflows/witness.yml
@@ -61,7 +61,7 @@ jobs:
               go-version: 1.21.x
 
           - if: ${{ inputs.artifact-download != '' }}
-            uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1
+            uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
             with:
               name: ${{ inputs.artifact-download }}
               path: /tmp