diff --git a/.github/workflows/gradle.yaml b/.github/workflows/gradle.yaml
index 51194212..90c50604 100644
--- a/.github/workflows/gradle.yaml
+++ b/.github/workflows/gradle.yaml
@@ -2,18 +2,24 @@ name: Java CI
 
 on: [pull_request, push]
 
+permissions:
+  contents: read #  to fetch code (actions/checkout)
+
 jobs:
   tests:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
-      - name: Set up JDK 8
-        uses: actions/setup-java@v5
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
-          java-version: '8'
-          distribution: 'adopt'
-      - name: Run Gradle Tests
-        uses: gradle/gradle-build-action@v2
+          persist-credentials: false
+      - name: Set up JDK 11
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6  # v6.0.1
         with:
-          arguments: check 
+          distribution: 'temurin'
+          java-version: '11'
+          java-package: 'jdk'
+      - name: Set up Gradle
+        uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - name: Test with Gradle
+        run: ./gradlew check