diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d39c5440a2..aee8469171 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -191,12 +191,20 @@ jobs:
           distribution: adopt
           java-version: 11
 
-      - name: Run muzzle
+      - name: Set up gradle cache
         uses: gradle/gradle-build-action@v2
         with:
-          arguments: ${{ matrix.module }}:muzzle
           cache-read-only: true
 
+      - name: Run muzzle
+        # using retry because of sporadic gradle download failures
+        uses: nick-invision/retry@v2.6.0
+        with:
+          # timing out has not been a problem, these jobs typically finish in 2-3 minutes
+          timeout_minutes: 15
+          max_attempts: 3
+          command: ./gradlew ${{ matrix.module }}:muzzle
+
   examples:
     runs-on: ubuntu-latest
     steps:
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 391b3487fc..7706b1b28e 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -182,12 +182,20 @@ jobs:
           distribution: adopt
           java-version: 11
 
-      - name: Run muzzle
+      - name: Set up gradle cache
         uses: gradle/gradle-build-action@v2
         with:
-          arguments: ${{ matrix.module }}:muzzle
           cache-read-only: true
 
+      - name: Run muzzle
+        # using retry because of sporadic gradle download failures
+        uses: nick-invision/retry@v2.6.0
+        with:
+          # timing out has not been a problem, these jobs typically finish in 2-3 minutes
+          timeout_minutes: 15
+          max_attempts: 3
+          command: ./gradlew ${{ matrix.module }}:muzzle
+
   examples:
     runs-on: ubuntu-latest
     steps:
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index f96d9fa86a..7921cd5dc9 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -242,12 +242,20 @@ jobs:
           distribution: adopt
           java-version: 11
 
-      - name: Run muzzle
+      - name: Set up gradle cache
         uses: gradle/gradle-build-action@v2
         with:
-          arguments: ${{ matrix.module }}:muzzle
           cache-read-only: true
 
+      - name: Run muzzle
+        # using retry because of sporadic gradle download failures
+        uses: nick-invision/retry@v2.6.0
+        with:
+          # timing out has not been a problem, these jobs typically finish in 2-3 minutes
+          timeout_minutes: 15
+          max_attempts: 3
+          command: ./gradlew ${{ matrix.module }}:muzzle
+
   examples:
     runs-on: ubuntu-latest
     steps: