diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index 55a8bdd712..441e207c94 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -50,7 +50,7 @@ jobs:
               run: "pnpm install --frozen-lockfile"
 
             - name: Login to GitHub Container Registry
-              uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4
+              uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
               with:
                   registry: ghcr.io
                   username: ${{ github.repository_owner }}
diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index 2ef2feaf6b..76fe386861 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -97,14 +97,14 @@ jobs:
                       latest=${{ contains(github.ref_name, '-rc.') && 'false' || 'auto' }}
 
             - name: Login to Docker Hub
-              uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4
+              uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
               if: github.event_name != 'pull_request'
               with:
                   username: ${{ secrets.DOCKERHUB_USERNAME }}
                   password: ${{ secrets.DOCKERHUB_TOKEN }}
 
             - name: Login to GitHub Container Registry
-              uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4
+              uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
               if: github.event_name != 'pull_request'
               with:
                   registry: ghcr.io
@@ -140,7 +140,7 @@ jobs:
                       services/web-repositories/secret/data/oci.element.io password | OCI_PASSWORD ;
 
             - name: Login to oci.element.io Registry
-              uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4
+              uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
               if: github.event_name != 'pull_request'
               with:
                   registry: oci-push.vpn.infra.element.io