diff --git a/.github/workflows/build-android.yml b/.github/workflows/build-android.yml
index ac571b8b..6d060803 100644
--- a/.github/workflows/build-android.yml
+++ b/.github/workflows/build-android.yml
@@ -41,6 +41,11 @@ jobs:
           distribution: 'zulu'
           java-version: 17
 
+      - name: Block compromised Java certificates
+        uses: Expensify/GitHub-Actions/block-compromised-java-certificates@b70c378d6cfae84f6844379eef3568cb33ea9680
+        with:
+          restrict-gradle: 'true'
+
       # v6.0.0
       - name: Setup Node.js
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903