diff --git a/.github/workflows/pre-release.yaml b/.github/workflows/pre-release.yaml
index 69753aac..ee3ce71b 100644
--- a/.github/workflows/pre-release.yaml
+++ b/.github/workflows/pre-release.yaml
@@ -20,7 +20,7 @@ jobs:
 
       - uses: pnpm/action-setup@v5
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.3.0
         with:
           node-version: "22"
           cache: "pnpm"
diff --git a/.github/workflows/publish-extension.yaml b/.github/workflows/publish-extension.yaml
index 5399343b..8a439aa1 100644
--- a/.github/workflows/publish-extension.yaml
+++ b/.github/workflows/publish-extension.yaml
@@ -29,7 +29,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.3.0
         with:
           node-version: "22"
 
@@ -60,7 +60,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: ${{ needs.setup.outputs.hasVscePat == 'true' }}
     steps:
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.3.0
         with:
           node-version: "22"
 
@@ -86,7 +86,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: ${{ needs.setup.outputs.hasOvsxPat == 'true' }}
     steps:
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.3.0
         with:
           node-version: "22"
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 7bd5f8f1..505bd2ce 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -30,7 +30,7 @@ jobs:
 
       - uses: pnpm/action-setup@v5
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.3.0
         with:
           node-version: "22"
           cache: "pnpm"