diff --git a/.github/workflows/build-and-analyze.yml b/.github/workflows/build-and-analyze.yml
index 8659f8bf1..90fc114ce 100644
--- a/.github/workflows/build-and-analyze.yml
+++ b/.github/workflows/build-and-analyze.yml
@@ -37,7 +37,7 @@ jobs:
           dotnet-version: |
             8.0.x
       - name: Set up JDK 11
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
         with:
           distribution: 'microsoft'
           java-version: 17
diff --git a/.github/workflows/pep-test-and-analyze.yml b/.github/workflows/pep-test-and-analyze.yml
index c0dd03069..98d840045 100644
--- a/.github/workflows/pep-test-and-analyze.yml
+++ b/.github/workflows/pep-test-and-analyze.yml
@@ -26,7 +26,7 @@ jobs:
             6.0.x
             5.0.x
       - name: Set up JDK 11
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
         with:
           distribution: 'zulu'
           java-version: 17