diff --git a/.github/workflows/build_images.yaml b/.github/workflows/build_images.yaml
index 66cdd40..eb6fb0a 100644
--- a/.github/workflows/build_images.yaml
+++ b/.github/workflows/build_images.yaml
@@ -76,7 +76,7 @@ jobs:
           password: ${{ secrets.HARBOR_TOKEN }}
       - name: Build & push to staging
         if: ${{ github.ref != 'refs/heads/master' }}
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           cache-from: type=gha
           cache-to: type=gha,mode=max
@@ -100,7 +100,7 @@ jobs:
               - '${{ matrix.image }}/version.txt'
       - name: Build & push to prod
         if: ${{ github.ref == 'refs/heads/master' }}
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           push: true
           context: "{{defaultContext}}:${{ matrix.image }}"
diff --git a/.github/workflows/cloud_chatops.yaml b/.github/workflows/cloud_chatops.yaml
index 54d8bd2..250d3a1 100644
--- a/.github/workflows/cloud_chatops.yaml
+++ b/.github/workflows/cloud_chatops.yaml
@@ -81,7 +81,7 @@ jobs:
 
       - name: Build and push to staging project
       # https://github.com/docker/build-push-action/releases
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           cache-from: type=gha
           cache-to: type=gha,mode=max
@@ -150,7 +150,7 @@ jobs:
               - 'cloud-chatops/version.txt'
 
       - name: Build and push on version change
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         if: steps.release_updated.outputs.version == 'true'
         with:
           cache-from: type=gha
diff --git a/.github/workflows/cloud_monitoring.yaml b/.github/workflows/cloud_monitoring.yaml
index 3423780..09cde02 100644
--- a/.github/workflows/cloud_monitoring.yaml
+++ b/.github/workflows/cloud_monitoring.yaml
@@ -77,7 +77,7 @@ jobs:
         run: echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
 
       - name: Build and push to staging project
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           cache-from: type=gha
           cache-to: type=gha,mode=max
@@ -181,7 +181,7 @@ jobs:
           password: ${{ secrets.HARBOR_TOKEN }}
 
       - name: Build and push on version change
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         if: steps.release_updated.outputs.version == 'true'
         with:
           cache-from: type=gha
diff --git a/.github/workflows/rabbit_consumer.yaml b/.github/workflows/rabbit_consumer.yaml
index a248b15..51069e0 100644
--- a/.github/workflows/rabbit_consumer.yaml
+++ b/.github/workflows/rabbit_consumer.yaml
@@ -71,7 +71,7 @@ jobs:
         run: echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
 
       - name: Build and push to staging project
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           cache-from: type=gha
           cache-to: type=gha,mode=max
@@ -112,7 +112,7 @@ jobs:
               - 'openstack-rabbit-consumer/version.txt'
 
       - name: Build and push on version change
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         if: steps.release_updated.outputs.version == 'true'
         with:
           cache-from: type=gha
diff --git a/.github/workflows/rabbit_consumer_chart_schedule.yaml b/.github/workflows/rabbit_consumer_chart_schedule.yaml
index 6d7c276..5ba39af 100644
--- a/.github/workflows/rabbit_consumer_chart_schedule.yaml
+++ b/.github/workflows/rabbit_consumer_chart_schedule.yaml
@@ -65,7 +65,7 @@ jobs:
         run: echo "version=$(cat openstack-rabbit-consumer/version.txt)" >> $GITHUB_OUTPUT
 
       - name: Build and push on version change
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         if: steps.release_updated.outputs.version == 'true'
         with:
           cache-from: type=gha
diff --git a/.github/workflows/username_service.yaml b/.github/workflows/username_service.yaml
index ec0bb50..908b2ca 100644
--- a/.github/workflows/username_service.yaml
+++ b/.github/workflows/username_service.yaml
@@ -33,7 +33,7 @@ jobs:
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
 
       - name: Run tests in container
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           no-cache: true
           cache-to: type=gha,mode=max
@@ -62,7 +62,7 @@ jobs:
         run: echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
 
       - name: Build and push to staging project
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           cache-from: type=gha
           cache-to: type=gha,mode=max
@@ -103,7 +103,7 @@ jobs:
               - 'stfc-username-service/version.txt'
 
       - name: Build and push on version change
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         if: steps.release_updated.outputs.version == 'true'
         with:
           cache-from: type=gha