diff --git a/.github/workflows/lf-windows-build.yml b/.github/workflows/lf-windows-build.yml
index faea6899..d90e130f 100644
--- a/.github/workflows/lf-windows-build.yml
+++ b/.github/workflows/lf-windows-build.yml
@@ -150,15 +150,25 @@ jobs:
   msi-windows:
     runs-on: 'windows-latest'
     needs:
-      - 'zip-windows'
+      - 'build-windows'
     steps:
 
+      - name: 'Harden Runner'
+        uses: 'step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e' # v2.10.4
+        with:
+          egress-policy: 'audit'
+
       - name: 'Add msbuild to PATH'
         uses: 'microsoft/setup-msbuild@v2'
 
       - name: 'Install WiX toolset'
         run: 'dotnet tool install --global wix'
 
+      - name: 'Download all artifacts'
+        uses: 'actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16' # v4.1.8
+        with:
+          path: 'C:\artifacts'
+
       - name: 'Prepare plugins for packaging'
         shell: 'bash'
         run: |