diff --git a/.github/workflows/qa-main.yml b/.github/workflows/qa-main.yml
index 35a799d..cb8131e 100644
--- a/.github/workflows/qa-main.yml
+++ b/.github/workflows/qa-main.yml
@@ -303,7 +303,7 @@ jobs:
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
       - name: SonarQube Cache
-        uses: actions/cache@v4
+        uses: actions/cache@v4.2.0
         with:
           path: ${{ github.workspace }}/.sonar/cache
           key: ${{ runner.os }}-${{ runner.arch }}-sonar
diff --git a/action.yml b/action.yml
index 776327a..7dacd10 100644
--- a/action.yml
+++ b/action.yml
@@ -32,7 +32,7 @@ runs:
         INPUT_PROJECTBASEDIR: ${{ inputs.projectBaseDir }}
     - name: Load Sonar Scanner CLI from cache
       id: sonar-scanner-cli
-      uses: actions/cache@v4
+      uses: actions/cache@v4.2.0
       env:
         # The default value is 60mins. Reaching timeout is treated the same as a cache miss.
         SEGMENT_DOWNLOAD_TIMEOUT_MINS: 1
diff --git a/deprecated-c-cpp/action.yml b/deprecated-c-cpp/action.yml
index a1e420f..c153a9b 100644
--- a/deprecated-c-cpp/action.yml
+++ b/deprecated-c-cpp/action.yml
@@ -71,7 +71,7 @@ runs:
     - name: Cache sonar-scanner installation
       id: cache-sonar-tools
       if: inputs.cache-binaries == 'true'
-      uses: actions/cache@v4
+      uses: actions/cache@v4.2.0
       env:
         # The default value is 60mins. Reaching timeout is treated the same as a cache miss.
         SEGMENT_DOWNLOAD_TIMEOUT_MINS: 1