diff --git a/.github/workflows/build-java-17.yml b/.github/workflows/build-java-17.yml
index e479c62..fd6d90d 100644
--- a/.github/workflows/build-java-17.yml
+++ b/.github/workflows/build-java-17.yml
@@ -23,7 +23,7 @@ jobs:
       with:
         persist-credentials: false
     - name: Set up JDK 17
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
       with:
         java-version: 17
         distribution: corretto
@@ -36,4 +36,4 @@ jobs:
         token: ${{ secrets.CODECOV_TOKEN }}
         slug: ${{ github.repository }}
     - name: Submit Dependency Snapshot
-      uses: advanced-security/maven-dependency-submission-action@v5
+      uses: advanced-security/maven-dependency-submission-action@b275d12641ac2d2108b2cbb7598b154ad2f2cee8 # v5.0.0
diff --git a/.github/workflows/codeql-java-17.yml b/.github/workflows/codeql-java-17.yml
index 1e612a3..6545f0f 100644
--- a/.github/workflows/codeql-java-17.yml
+++ b/.github/workflows/codeql-java-17.yml
@@ -65,7 +65,7 @@ jobs:
         queries: security-and-quality
 
     # Attempting compatibiltiy with Java 17
-    - uses: actions/setup-java@v5
+    - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
       with:
         java-version: 17
         distribution: corretto
diff --git a/.github/workflows/release-maven-central-java-17.yml b/.github/workflows/release-maven-central-java-17.yml
index fbcdf94..0757eda 100644
--- a/.github/workflows/release-maven-central-java-17.yml
+++ b/.github/workflows/release-maven-central-java-17.yml
@@ -19,7 +19,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Java for publishing to Maven Central Repository
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         with:
           java-version: 17
           distribution: corretto