diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3c57b9e..19ff531 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -138,7 +138,7 @@ jobs:
       # v5 retired is the legacy `adopt*` distributions, which this line never named.
       - name: Set up the JDK the scanner engine runs on
         if: needs.check-sonar-token.outputs.has-token == 'true'
-        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
+        uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0
         with:
           distribution: 'zulu'
           java-version: '17'