diff --git a/.github/workflows/jdk.java.net-uri-list.yml b/.github/workflows/jdk.java.net-uri-list.yml
index 66d96fd..a5c8361 100644
--- a/.github/workflows/jdk.java.net-uri-list.yml
+++ b/.github/workflows/jdk.java.net-uri-list.yml
@@ -10,5 +10,5 @@ jobs:
   list:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - run: $JAVA_HOME_21_X64/bin/java --show-version src/ListOpenJavaDevelopmentKits.java ${{ github.event.inputs.name }}
diff --git a/.github/workflows/jdk.java.net-uri-update.yml b/.github/workflows/jdk.java.net-uri-update.yml
index 213821b..bf6cd9f 100644
--- a/.github/workflows/jdk.java.net-uri-update.yml
+++ b/.github/workflows/jdk.java.net-uri-update.yml
@@ -9,7 +9,7 @@ jobs:
     permissions: write-all
     steps:
       - run: curl --output /dev/null --verbose --head --fail https://jdk.java.net
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - run: $JAVA_HOME_21_X64/bin/java src/ListOpenJavaDevelopmentKits.java > jdk.java.net-uri.properties
       - run: |
           git diff
diff --git a/.github/workflows/manual-all-environments.yml b/.github/workflows/manual-all-environments.yml
index 34042a6..046f4f2 100644
--- a/.github/workflows/manual-all-environments.yml
+++ b/.github/workflows/manual-all-environments.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: 'Check out repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Set up default JDK'
         id: setup
         uses: ./
diff --git a/.github/workflows/manual-java.net-all.yml b/.github/workflows/manual-java.net-all.yml
index ab3f4a3..af5a9d6 100644
--- a/.github/workflows/manual-java.net-all.yml
+++ b/.github/workflows/manual-java.net-all.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: 'Check out repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Set up JDK'
         id: setup
         uses: ./
@@ -43,7 +43,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: 'Check out repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Set up JDK'
         id: setup
         uses: ./
diff --git a/.github/workflows/manual-java.net-ea-latest.yml b/.github/workflows/manual-java.net-ea-latest.yml
index 51ceda1..da0f1a5 100644
--- a/.github/workflows/manual-java.net-ea-latest.yml
+++ b/.github/workflows/manual-java.net-ea-latest.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: 'Check out repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Set up JDK'
         id: setup
         uses: ./
diff --git a/.github/workflows/manual-oracle.com-17-archive.yml b/.github/workflows/manual-oracle.com-17-archive.yml
index 434288f..943a974 100644
--- a/.github/workflows/manual-oracle.com-17-archive.yml
+++ b/.github/workflows/manual-oracle.com-17-archive.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: 'Check out repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Set up JDK'
         id: setup
         uses: ./
diff --git a/.github/workflows/manual-oracle.com-17-latest.yml b/.github/workflows/manual-oracle.com-17-latest.yml
index bf77cdf..1d4f391 100644
--- a/.github/workflows/manual-oracle.com-17-latest.yml
+++ b/.github/workflows/manual-oracle.com-17-latest.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: 'Check out repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Set up JDK'
         id: setup
         uses: ./
diff --git a/.github/workflows/manual-uri.yml b/.github/workflows/manual-uri.yml
index 65d4f74..1b6f828 100644
--- a/.github/workflows/manual-uri.yml
+++ b/.github/workflows/manual-uri.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ${{ github.event.inputs.os }}
     steps:
       - name: 'Check out repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Set up JDK'
         id: setup
         uses: ./
diff --git a/.github/workflows/manual-website-release-version.yml b/.github/workflows/manual-website-release-version.yml
index 16e0b6b..eb5746e 100644
--- a/.github/workflows/manual-website-release-version.yml
+++ b/.github/workflows/manual-website-release-version.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: 'Check out repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Set up JDK'
         id: setup
         uses: ./
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c411793..9dbf42a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Check out repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Compile and run test'
         shell: bash
         run: |
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Check out repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Run validation program'
         shell: bash
         run: |
diff --git a/action.yml b/action.yml
index 334ed91..a2a7963 100644
--- a/action.yml
+++ b/action.yml
@@ -75,7 +75,7 @@ runs:
         fi
     - name: 'Install Java Development Kit'
       if: ${{ inputs.install  == 'true' }}
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
       with:
         java-version: ${{ steps.download.outputs.version }}
         distribution: jdkfile