diff --git a/.github/workflows/prvalidation.yaml b/.github/workflows/prvalidation.yaml
index a56334e..82ba6b5 100644
--- a/.github/workflows/prvalidation.yaml
+++ b/.github/workflows/prvalidation.yaml
@@ -13,7 +13,7 @@ jobs:
 
     steps:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-    - uses: docker/build-push-action@v6
+    - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
       with:
         file: Dockerfile
         context: .
diff --git a/.github/workflows/releaseflow.yaml b/.github/workflows/releaseflow.yaml
index 4316675..2a852b3 100644
--- a/.github/workflows/releaseflow.yaml
+++ b/.github/workflows/releaseflow.yaml
@@ -23,7 +23,7 @@ jobs:
         # Password or personal access token used to log against the Docker registry
         password: ${{ secrets.DOCKERHUB_PASSWORD }}
 
-    - uses: docker/build-push-action@v6
+    - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
       with:
         file: Dockerfile
         context: .