diff --git a/.github/workflows/release-republish.yml b/.github/workflows/release-republish.yml
index 7c76e70ab..0c28ccdbc 100644
--- a/.github/workflows/release-republish.yml
+++ b/.github/workflows/release-republish.yml
@@ -143,7 +143,7 @@ jobs:
             "${TAG}" \
             "${EXPECTED_SHA}"
       - name: Build and push
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
         env:
           DOCKER_BUILD_RECORD_UPLOAD: false
           DOCKER_BUILD_SUMMARY: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 601260f25..451edd020 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -276,7 +276,7 @@ jobs:
             "${EXPECTED_SHA}"
       - name: Assemble and push native image by digest
         id: build
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
         env:
           DOCKER_BUILD_RECORD_UPLOAD: false
           DOCKER_BUILD_SUMMARY: false