diff --git a/.github/workflows/hf-search-example.yml b/.github/workflows/hf-search-example.yml
index 3538738da..707d790fe 100644
--- a/.github/workflows/hf-search-example.yml
+++ b/.github/workflows/hf-search-example.yml
@@ -32,7 +32,7 @@ jobs:
           go-version-file: 'go.mod'
           cache: true
 
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@v7.1.0
         with:
           python-version: '3.12'
           cache: 'pip'
diff --git a/.github/workflows/interop-example-commands.yml b/.github/workflows/interop-example-commands.yml
index e29da35ce..f76cbe017 100644
--- a/.github/workflows/interop-example-commands.yml
+++ b/.github/workflows/interop-example-commands.yml
@@ -22,7 +22,7 @@ jobs:
       - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version-file: go.mod
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: '3.12'
       - name: Build all old/new commands without workspace overrides and check safe behavior
diff --git a/.github/workflows/langgraph-example.yml b/.github/workflows/langgraph-example.yml
index 2d41b2f0b..fd2c59fdf 100644
--- a/.github/workflows/langgraph-example.yml
+++ b/.github/workflows/langgraph-example.yml
@@ -27,7 +27,7 @@ jobs:
           go-version-file: 'go.mod'
           cache: true
 
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@v7.1.0
         with:
           python-version: '3.12'
           cache: 'pip'
diff --git a/.github/workflows/redis-example-commands.yml b/.github/workflows/redis-example-commands.yml
index e41a5a474..71bba9cb0 100644
--- a/.github/workflows/redis-example-commands.yml
+++ b/.github/workflows/redis-example-commands.yml
@@ -22,7 +22,7 @@ jobs:
       - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version-file: go.mod
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: '3.12'
       - name: Build all old/new commands without workspace overrides and check safe behavior
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 37392364c..0d70c0c25 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -160,7 +160,7 @@ jobs:
           name: libs-linux-win
 
       - name: Setup Python
-        uses: actions/setup-python@v7
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: '3.10'