diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 336d015..f2dc706 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -92,7 +92,7 @@ jobs:
             uploads.github.com:443
 
       - name: Download SARIF artifact
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131  # v7.0.0
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3  # v8.0.0
         with:
           name: scorecard-sarif