diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3f60d69c1..d97b27d81 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ jobs:
         steps:
             - uses: actions/checkout@v4
             - uses: gradle/wrapper-validation-action@v2
-            - uses: actions/setup-java@v4
+            - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
               with:
                 distribution: 'zulu'
                 java-version: '17'
@@ -28,7 +28,7 @@ jobs:
         steps:
             - uses: actions/checkout@v4
             - uses: gradle/wrapper-validation-action@v2
-            - uses: actions/setup-java@v4
+            - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
               with:
                 distribution: 'zulu'
                 java-version: '17'
@@ -50,7 +50,7 @@ jobs:
         steps:
             - uses: actions/checkout@v4
             - uses: gradle/wrapper-validation-action@v2
-            - uses: actions/setup-java@v4
+            - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
               with:
                 distribution: 'zulu'
                 java-version: '17'
@@ -72,7 +72,7 @@ jobs:
         timeout-minutes: 30
         steps:
             - uses: actions/checkout@v4
-            - uses: actions/setup-java@v4
+            - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
               with:
                 distribution: 'zulu'
                 java-version: '17'
@@ -127,7 +127,7 @@ jobs:
       steps:
         - uses: actions/checkout@v4
         - uses: gradle/wrapper-validation-action@v2
-        - uses: actions/setup-java@v4
+        - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
           with:
             distribution: 'zulu'
             java-version: '17'