diff --git a/.github/workflows/benchmarks.yaml b/.github/workflows/benchmarks.yaml
index dc988501..0da38268 100644
--- a/.github/workflows/benchmarks.yaml
+++ b/.github/workflows/benchmarks.yaml
@@ -68,7 +68,7 @@ jobs:
           cache: gradle
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v6
+        uses: gradle/actions/setup-gradle@v6.2.0
 
       - name: Display run configuration
         run: |
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 030e1ca3..516251eb 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -51,7 +51,7 @@ jobs:
           cache: gradle
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v6
+        uses: gradle/actions/setup-gradle@v6.2.0
 
       - name: Build and test
         run: ./gradlew check --no-daemon --stacktrace
diff --git a/.github/workflows/native-image.yaml b/.github/workflows/native-image.yaml
index db762f1a..92d6fd62 100644
--- a/.github/workflows/native-image.yaml
+++ b/.github/workflows/native-image.yaml
@@ -53,7 +53,7 @@ jobs:
         run: native-image --version
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v6
+        uses: gradle/actions/setup-gradle@v6.2.0
 
       # nativeRun builds the binary then executes it. Because NativeVerify calls System.exit(non-zero)
       # on any failed capability, a failing binary fails this step — no extra assertion needed.