diff --git a/.github/workflows/cache-maven-dependencies.yaml b/.github/workflows/cache-maven-dependencies.yaml
index 23d5ff4ee..b46bd7b40 100644
--- a/.github/workflows/cache-maven-dependencies.yaml
+++ b/.github/workflows/cache-maven-dependencies.yaml
@@ -23,7 +23,7 @@ jobs:
           ref: ${{ env.MAVEN_CACHE_REF }}
 
       - name: 'Setup Java'
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: 'sapmachine'
           java-version: 21
diff --git a/.github/workflows/continuous-integration.yaml b/.github/workflows/continuous-integration.yaml
index 1ba5db2f3..fdfc67e35 100644
--- a/.github/workflows/continuous-integration.yaml
+++ b/.github/workflows/continuous-integration.yaml
@@ -30,7 +30,7 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
 
       - name: "Setup java"
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: "sapmachine"
           java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/dependency-test.yaml b/.github/workflows/dependency-test.yaml
index 58c18e233..e1614809d 100644
--- a/.github/workflows/dependency-test.yaml
+++ b/.github/workflows/dependency-test.yaml
@@ -48,7 +48,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: "Setup java"
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: "sapmachine"
           java-version: ${{ env.JAVA_VERSION }}
@@ -86,7 +86,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: "Setup java"
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: "sapmachine"
           java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/deploy-snapshot.yaml b/.github/workflows/deploy-snapshot.yaml
index 2f85e1aa3..3773e346b 100644
--- a/.github/workflows/deploy-snapshot.yaml
+++ b/.github/workflows/deploy-snapshot.yaml
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: "Setup java"
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: "sapmachine"
           java-version: "21"
diff --git a/.github/workflows/e2e-test.yaml b/.github/workflows/e2e-test.yaml
index 3aef8900c..ea82c7d05 100644
--- a/.github/workflows/e2e-test.yaml
+++ b/.github/workflows/e2e-test.yaml
@@ -29,7 +29,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: "Setup java"
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: "sapmachine"
           java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/fosstars-report.yml b/.github/workflows/fosstars-report.yml
index ba373913f..189d4e364 100644
--- a/.github/workflows/fosstars-report.yml
+++ b/.github/workflows/fosstars-report.yml
@@ -23,7 +23,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: 'Setup java'
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: 'sapmachine'
           java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/javadoc.yaml b/.github/workflows/javadoc.yaml
index 0c5f7aa7f..90c8c2844 100644
--- a/.github/workflows/javadoc.yaml
+++ b/.github/workflows/javadoc.yaml
@@ -46,7 +46,7 @@ jobs:
           ref: ${{ inputs.branch }}
 
       - name: "Setup Java"
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: "sapmachine"
           java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/perform-release.yaml b/.github/workflows/perform-release.yaml
index 5c4ac0de8..8a371d597 100644
--- a/.github/workflows/perform-release.yaml
+++ b/.github/workflows/perform-release.yaml
@@ -132,7 +132,7 @@ jobs:
           permission-pull-requests: write # needed to merge the release PR
 
       - name: 'Setup java'
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: 'sapmachine'
           java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml
index 1c876112b..3609f0e85 100644
--- a/.github/workflows/prepare-release.yaml
+++ b/.github/workflows/prepare-release.yaml
@@ -119,7 +119,7 @@ jobs:
           ref: ${{ needs.bump-version.outputs.release-branch }}
 
       - name: 'Setup java'
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: 'sapmachine'
           java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/spec-update.yaml b/.github/workflows/spec-update.yaml
index 1f06ddb0c..68fb0647d 100644
--- a/.github/workflows/spec-update.yaml
+++ b/.github/workflows/spec-update.yaml
@@ -95,7 +95,7 @@ jobs:
           echo "BASE=$BASE" >> "$GITHUB_OUTPUT"
 
       - name: 'Setup Java'
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           distribution: 'sapmachine'
           java-version: ${{ env.JAVA_VERSION }}