diff --git a/.github/workflows/agent-evals.yaml b/.github/workflows/agent-evals.yaml
index eeae3985..1f92c674 100644
--- a/.github/workflows/agent-evals.yaml
+++ b/.github/workflows/agent-evals.yaml
@@ -45,7 +45,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: '3.12'
           cache: pip
@@ -142,7 +142,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: '3.12'
           cache: pip
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index b606ca36..3122446b 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -42,7 +42,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: '3.12'
           cache: 'pip'
@@ -68,7 +68,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: '3.12'
           cache: 'pip'
diff --git a/.github/workflows/mcpbridge-build.yaml b/.github/workflows/mcpbridge-build.yaml
index 3528fff8..b863cd78 100644
--- a/.github/workflows/mcpbridge-build.yaml
+++ b/.github/workflows/mcpbridge-build.yaml
@@ -42,7 +42,7 @@ jobs:
     continue-on-error: true
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: '3.12'
           cache: 'pip'
diff --git a/.github/workflows/sre-build.yaml b/.github/workflows/sre-build.yaml
index f0a8e41c..75472df7 100644
--- a/.github/workflows/sre-build.yaml
+++ b/.github/workflows/sre-build.yaml
@@ -40,7 +40,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: '3.12'
           cache: 'pip'
@@ -66,7 +66,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: '3.12'
           cache: 'pip'