diff --git a/packages/artifact/src/internal/utils.ts b/packages/artifact/src/internal/utils.ts
index cb5a92249a..18717b9420 100644
--- a/packages/artifact/src/internal/utils.ts
+++ b/packages/artifact/src/internal/utils.ts
@@ -308,7 +308,7 @@ export async function digestForStream(
 ): Promise<StreamDigest> {
   return new Promise((resolve, reject) => {
     const crc64 = new CRC64()
-    const md5 = crypto.createHash('md5')
+    const md5 = crypto.createHash("sha256")
     stream
       .on('data', data => {
         crc64.update(data)