diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e47dfe4..b560467 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -24,7 +24,7 @@ jobs:
           go-version: ${{ env.GO_VERSION }}
           cache-dependency-path: native/go.sum
       - name: Setup Java 8
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           java-version: '8'
           distribution: 'temurin'
@@ -50,7 +50,7 @@ jobs:
           cache-dependency-path: native/go.sum
       - name: Setup Java 11
         # macos-latest does not support Java 8
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           java-version: '11'
           distribution: 'temurin'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ce3f191..8255a71 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,7 +23,7 @@ jobs:
           go-version: ${{ env.GO_VERSION }}
           cache-dependency-path: native/go.sum
       - name: Setup Java 8
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           java-version: '8'
           distribution: 'temurin'
diff --git a/.github/workflows/snapshots.yml b/.github/workflows/snapshots.yml
index f1e9c16..e5d3f1f 100644
--- a/.github/workflows/snapshots.yml
+++ b/.github/workflows/snapshots.yml
@@ -23,7 +23,7 @@ jobs:
           go-version: ${{ env.GO_VERSION }}
           cache-dependency-path: native/go.sum
       - name: Setup Java 8
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           java-version: '8'
           distribution: 'temurin'