diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a85c6916..d751d5fb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -449,7 +449,7 @@ jobs:
 
       - name: Pre-build controller image (buildx + GHA cache)
         if: steps.paths.outputs.run == 'true'
-        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v6
         with:
           context: .
           file: controller/Dockerfile
@@ -460,7 +460,7 @@ jobs:
 
       - name: Pre-build inference-router image (buildx + GHA cache)
         if: steps.paths.outputs.run == 'true'
-        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v6
         with:
           context: .
           file: inference-router/Dockerfile
diff --git a/.github/workflows/image-cache-publish.yml b/.github/workflows/image-cache-publish.yml
index 8a23f9fd..7d4f4019 100644
--- a/.github/workflows/image-cache-publish.yml
+++ b/.github/workflows/image-cache-publish.yml
@@ -104,7 +104,7 @@ jobs:
 
       - name: Build and push ${{ matrix.image.name }}
         if: steps.changed.outputs.run == 'true'
-        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v6
         with:
           context: .
           file: ${{ matrix.image.dockerfile }}
diff --git a/.github/workflows/image-sign-sbom.yml b/.github/workflows/image-sign-sbom.yml
index b752cd2c..c47c5e6e 100644
--- a/.github/workflows/image-sign-sbom.yml
+++ b/.github/workflows/image-sign-sbom.yml
@@ -48,7 +48,7 @@ jobs:
           password: ${{ secrets.ACR_PASSWORD }}
 
       - name: Build and push image
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: .
           file: ${{ matrix.component.dockerfile }}