diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 863beabc1..c301a6589 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -263,14 +263,14 @@ jobs:
            wget,
            zip
 
-     - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
+     - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # v4.3.0
        id: setup-java7
        with:
          distribution: 'zulu'
          java-version: 7
        if: matrix.version == 'jdk8u'
 
-     - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
+     - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # v4.3.0
        id: setup-java11
        with:
          distribution: 'temurin'
diff --git a/.github/workflows/signsbom.yml b/.github/workflows/signsbom.yml
index 6f94444f0..9a111b1b6 100644
--- a/.github/workflows/signsbom.yml
+++ b/.github/workflows/signsbom.yml
@@ -37,7 +37,7 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       # Build with jdk17 to ensure TemurinSignSBOM meets min compatibility
-      - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
+      - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # v4.3.0
         id: setup-java
         with:
           java-version: 17
diff --git a/.github/workflows/testsbom.yml b/.github/workflows/testsbom.yml
index 84b873e32..7eb0ff22c 100644
--- a/.github/workflows/testsbom.yml
+++ b/.github/workflows/testsbom.yml
@@ -38,7 +38,7 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       # Build with jdk8 to ensure TemurinGenSBOM meets min compatibility
-      - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
+      - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # v4.3.0
         id: setup-java
         with:
           java-version: 8