diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 65b9377..642efd8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -285,7 +285,7 @@ jobs:
         uses: imjasonh/setup-crane@v0.4
 
       - name: Login to Spaces Artifacts Registry
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
         if: env.XPKG_SPACES_ARTIFACTS_ACCESS_ID != ''
         with:
           registry: xpkg.upbound.io/spaces-artifacts
diff --git a/.github/workflows/promote.yml b/.github/workflows/promote.yml
index 352191c..94a0b32 100644
--- a/.github/workflows/promote.yml
+++ b/.github/workflows/promote.yml
@@ -40,14 +40,14 @@ jobs:
         run: git fetch --prune --unshallow
 
       - name: Login to Docker
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
         if: env.DOCKER_USR != ''
         with:
           username: ${{ secrets.DOCKER_USR }}
           password: ${{ secrets.DOCKER_PSW }}
 
       - name: Login to Upbound
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
         if: env.XPKG_ACCESS_ID != ''
         with:
           registry: xpkg.upbound.io