diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c2f1eae..d0b80cc 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -136,7 +136,7 @@ jobs:
         uses: actions/download-artifact@v4
 
       - name: Setup Java for JReleaser
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0
         with:
           java-version: '21'
           distribution: 'adopt'