diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c554057e..56fe185d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -93,7 +93,7 @@ jobs:
 
       - name: Set up Docker Buildx
         if: steps.should-build.outputs.skip != 'true'
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
       - name: ActivityPub Docker metadata for private registry
         if: steps.should-build.outputs.skip != 'true'
@@ -280,7 +280,7 @@ jobs:
               - 'jobs/reconcile-account-topics/**'
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
       - name: Docker metadata
         if: steps.changes.outputs.reconcile-account-topics == 'true'
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 860169a7..cac62791 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -81,7 +81,7 @@ jobs:
 
       - name: Set up Docker Buildx
         if: github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
       - name: Push ActivityPub Docker image to private registry
         run: |