diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 92325d5..44f78aa 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -42,7 +42,7 @@ jobs:
       digest: ${{ steps.digest.outputs.result }}
     steps:
     - name: Download math result from build job
-      uses: actions/download-artifact@v2
+      uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
       with:
         name: ${{ env.PRODUCT }}
         path: .
@@ -62,7 +62,7 @@ jobs:
     needs: [build, checksum]
     steps:
     - name: Download math result from build and checksum jobs
-      uses: actions/download-artifact@v2
+      uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
       with:
         name: ${{ env.PRODUCT }}
         path: ${{ env.PRODUCT }}