diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f96f52403a..ff9bb509be 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -129,7 +129,7 @@ jobs:
 
 
     - name: "Install: JDK ${{ env.JAVA_VERSION }} ☕"
-      uses: actions/setup-java@v5  # https://github.com/actions/setup-java
+      uses: actions/setup-java@v5.6.0  # https://github.com/actions/setup-java
       with:
         distribution: temurin
         java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index bcebb1bcf2..d2a805ba69 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -81,7 +81,7 @@ jobs:
 
     # CodeQL executes https://github.com/ferstl/depgraph-maven-plugin
     - name: "Install: JDK 21 for Maven/Tycho ☕"
-      uses: actions/setup-java@v5  # https://github.com/actions/setup-java
+      uses: actions/setup-java@v5.6.0  # https://github.com/actions/setup-java
       if: matrix.language == 'java'
       with:
         distribution: temurin
diff --git a/.github/workflows/licensecheck.yml b/.github/workflows/licensecheck.yml
index 7aab7f6be8..5863a965fc 100644
--- a/.github/workflows/licensecheck.yml
+++ b/.github/workflows/licensecheck.yml
@@ -71,7 +71,7 @@ jobs:
         repository: ${{ fromJSON(steps.get-pr.outputs.result).head.repo.full_name }}
         ref: ${{ fromJSON(steps.get-pr.outputs.result).head.sha }} # or .head.ref for branch name
     - name: Set up JDK 21
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@v5.6.0
       with:
         java-version: '21'
         distribution: 'temurin'