diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a668e07..c657b03 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -55,7 +55,7 @@ jobs:
           push: false
 
       - name: Build flagd-testbed-socket Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
         with:
           context: .
           file: flagd/Dockerfile
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 6506808..97e7753 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -90,7 +90,7 @@ jobs:
             ${{ env.REGISTRY }}/open-feature/${{ env.FLAGD_IMAGE_NAME }}-ssl:latest
 
       - name: Build and push flagd-testbed-ssl Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
         with:
           context: .
           file: flagd/Dockerfile