diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
index 116d16d1..e54f0330 100644
--- a/.github/workflows/sonar.yml
+++ b/.github/workflows/sonar.yml
@@ -22,7 +22,7 @@ jobs:
 
       # Setup
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: "temurin"