diff --git a/.github/workflows/test_2.x_java.yml b/.github/workflows/test_2.x_java.yml
index caf8a9cc..29d47760 100644
--- a/.github/workflows/test_2.x_java.yml
+++ b/.github/workflows/test_2.x_java.yml
@@ -23,10 +23,12 @@ jobs:
     steps:
     - name: Checkout
       # see https://github.com/actions/checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      with:
+        persist-credentials: false
     - name: Set up JDK
       # see https://github.com/actions/setup-java
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
       with:
         java-version: '8'
         distribution: 'zulu'