diff --git a/.github/workflows/build-and-release.yaml b/.github/workflows/build-and-release.yaml
index 294c4500..69ef04e5 100644
--- a/.github/workflows/build-and-release.yaml
+++ b/.github/workflows/build-and-release.yaml
@@ -236,7 +236,7 @@ jobs:
     if: ${{ inputs.dry_run != true }}
     steps:
       - name: Download all packages
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           pattern: packages-*
           merge-multiple: true
diff --git a/.github/workflows/k8s-collector-integration.yaml b/.github/workflows/k8s-collector-integration.yaml
index b65542aa..7cd1b044 100644
--- a/.github/workflows/k8s-collector-integration.yaml
+++ b/.github/workflows/k8s-collector-integration.yaml
@@ -63,7 +63,7 @@ jobs:
           cluster_name: k8s-collector-e2e
 
       - name: Download k8s-collector integration binary
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: k8s-collector-integration
           path: ./