Github Actions Download Artifact From Another Workflow Best 〈2025-2026〉

Always use the minimal required token scope. For cross-repository downloads, use a Personal Access Token (PAT) with restricted access.

- name: Download latest artifact from master uses: dawidd6/action-download-artifact@v2 with: github_token: ${{ secrets.GITHUB_TOKEN }} workflow: build.yml name: production-assets branch: main workflow_conclusion: success Use code with caution. 4. Alternative: GitHub CLI github actions download artifact from another workflow

Downloading artifact from different workflow #106300 - GitHub Always use the minimal required token scope

Sometimes you don't have the run-id and need to find the latest successful artifact from a specific branch. The dawidd6/action-download-artifact is a popular choice for these scenarios. github actions download artifact from another workflow

This is particularly useful for local testing or within composite actions where you want to avoid third-party dependencies. Best Practices & Security