diff --git a/.github/workflows/kube-flux-diff.yaml b/.github/workflows/kube-flux-diff.yaml
index 627a3b2f..ee179bee 100644
--- a/.github/workflows/kube-flux-diff.yaml
+++ b/.github/workflows/kube-flux-diff.yaml
@@ -85,7 +85,7 @@ jobs:
           app-id: "${{ secrets.BOT_APP_ID }}" # $BOT_APP_ID is found in GitHub App main settings page
           private-key: "${{ secrets.BOT_JWT_PRIVATE_KEY }}" # $BOT_JWT_PRIVATE_KEY is generated in GitHub App main settings page, uses the X.509 private key format
       - name: Download Splits
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: "${{ needs.flux-diff.outputs.artifact }}"
       - run: |