diff --git a/.github/workflows/android-screenshot.yml b/.github/workflows/android-screenshot.yml
index d6cb1afc0e..32b228e87c 100644
--- a/.github/workflows/android-screenshot.yml
+++ b/.github/workflows/android-screenshot.yml
@@ -20,7 +20,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v7.0.0
       - name: Setup the java environment
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.3.0
         with:
           distribution: 'temurin'
           java-version: '25'
diff --git a/.github/workflows/j3o-scan.yml b/.github/workflows/j3o-scan.yml
index 85b6c93794..fffd492510 100644
--- a/.github/workflows/j3o-scan.yml
+++ b/.github/workflows/j3o-scan.yml
@@ -31,7 +31,7 @@ jobs:
         uses: actions/checkout@v7.0.0
 
       - name: Set up Java
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.3.0
         with:
           distribution: temurin
           java-version: '25'
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 6a3384628c..bad186ade5 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -62,7 +62,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: Setup the java environment
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.3.0
         with:
           distribution: 'temurin'
           java-version: '25'
@@ -89,7 +89,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: Setup the java environment
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.3.0
         with:
           distribution: 'temurin'
           java-version: '25'
@@ -116,7 +116,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: Setup the java environment
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.3.0
         with:
           distribution: 'temurin'
           java-version: '25'
@@ -140,7 +140,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: Setup the java environment
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.3.0
         with:
           distribution: 'temurin'
           java-version: '25'
@@ -205,7 +205,7 @@ jobs:
           fetch-depth: 1
 
       - name: Setup the java environment
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.3.0
         with:
           distribution: 'temurin'
           java-version: 25
@@ -245,7 +245,7 @@ jobs:
           fetch-depth: 1
 
       - name: Setup the java environment
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.3.0
         with:
           distribution: 'temurin'
           java-version: ${{ matrix.jdk }}
@@ -330,7 +330,7 @@ jobs:
 
       # Setup jdk 25 used for building Maven-style artifacts
       - name: Setup the java environment
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5
         with:
           distribution: 'temurin'
           java-version: '25'
@@ -370,7 +370,7 @@ jobs:
 
       # Setup jdk 25 used for building Sonatype artifacts
       - name: Setup the java environment
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.3.0
         with:
           distribution: 'temurin'
           java-version: '25'