diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6c05965bb..ee4e5dfc3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -260,7 +260,7 @@ jobs:
 
       - name: Login to GCP Artifact Registry
         if: steps.changes.outputs.reconcile-account-topics == 'true'
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
         with:
           registry: europe-docker.pkg.dev
           username: oauth2accesstoken
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index e04fab46d..49b5ec403 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -58,7 +58,7 @@ jobs:
           service_account: cicd-activitypub-terraform@ghost-activitypub.iam.gserviceaccount.com
 
       - name: Login to GCP Artifact Registry
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
         with:
           registry: europe-docker.pkg.dev
           username: oauth2accesstoken
@@ -66,7 +66,7 @@ jobs:
 
       - name: Login to GitHub Container Registry"
         if: github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}