diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 476ee9c..317fabd 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -126,7 +126,7 @@ jobs:
           DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
 
       - name: Build and push
-        uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c # pin@v4
+        uses: docker/build-push-action@a254f8ca60a858f3136a2f1f23a60969f2c402dd # pin@v4
         with:
           push: true
           sbom: true
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c3ff732..a100f84 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -22,6 +22,6 @@ jobs:
         uses: docker/setup-buildx-action@4fd812986e6c8c2a69e18311145f9371337f27d4 # pin@v2
 
       - name: Build
-        uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c # pin@v4
+        uses: docker/build-push-action@a254f8ca60a858f3136a2f1f23a60969f2c402dd # pin@v4
         with:
           push: false