diff --git a/.github/workflows/publish_coverage_pr.yml b/.github/workflows/publish_coverage_pr.yml
index b678038b0a6a..c02920d2c7bd 100644
--- a/.github/workflows/publish_coverage_pr.yml
+++ b/.github/workflows/publish_coverage_pr.yml
@@ -53,7 +53,7 @@ jobs:
       - name: 'Download PR metadata'
         id: download-metadata
         # Pin action to full length commit SHA
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           name: pr-metadata
           path: pr-metadata/
@@ -110,7 +110,7 @@ jobs:
       - name: 'Download coverage artifacts'
         id: download-coverage
         # Pin action to full length commit SHA
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           name: coverage-artifacts
           path: artifacts/