diff --git a/.github/workflows/smoke-test.yml b/.github/workflows/smoke-test.yml
index 30b8fa30..26d2a8e9 100644
--- a/.github/workflows/smoke-test.yml
+++ b/.github/workflows/smoke-test.yml
@@ -32,7 +32,7 @@ jobs:
           repository: ${{ inputs.checkout_repository }}
           ref: ${{ inputs.checkout_ref }}
       - name: Set up Java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
         if: ${{ inputs.type == 'jvm' }}
         with:
           java-version: '17'
diff --git a/gradle/plugins/aot-smoke-test-ci-plugin/src/main/resources/smoke-test.yml b/gradle/plugins/aot-smoke-test-ci-plugin/src/main/resources/smoke-test.yml
index 30b8fa30..26d2a8e9 100644
--- a/gradle/plugins/aot-smoke-test-ci-plugin/src/main/resources/smoke-test.yml
+++ b/gradle/plugins/aot-smoke-test-ci-plugin/src/main/resources/smoke-test.yml
@@ -32,7 +32,7 @@ jobs:
           repository: ${{ inputs.checkout_repository }}
           ref: ${{ inputs.checkout_ref }}
       - name: Set up Java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
         if: ${{ inputs.type == 'jvm' }}
         with:
           java-version: '17'