diff --git a/.github/workflows/oscal-check.yaml b/.github/workflows/oscal-check.yaml
index 84af4d99..30f2a344 100644
--- a/.github/workflows/oscal-check.yaml
+++ b/.github/workflows/oscal-check.yaml
@@ -37,7 +37,7 @@ jobs:
           cache: true
 
       - name: Setup Java # this is here because oscal-cli-action below needs a java runtime
-        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
         id: setup-java
         with:
           distribution: temurin