diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4809ebb61ad..e8200c370c7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -26,7 +26,7 @@ jobs:
           bash tools/ci/install_build_deps.sh
           bash tools/ci/install_dreamchecker.sh
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v6.3.0
         with:
           python-version: '3.13'
           cache: 'pip'
diff --git a/.github/workflows/merge_upstream_master.yml b/.github/workflows/merge_upstream_master.yml
index 784af7159d3..c782ac3831e 100644
--- a/.github/workflows/merge_upstream_master.yml
+++ b/.github/workflows/merge_upstream_master.yml
@@ -59,7 +59,7 @@ jobs:
           cache: 'yarn'
           cache-dependency-path: ./tgui/yarn.lock
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v6.3.0
         with:
           python-version: '3.13'
           cache: 'pip'