diff --git a/.github/workflows/docker-publish.yaml b/.github/workflows/docker-publish.yaml
index 4716888035..f229e6cfa5 100644
--- a/.github/workflows/docker-publish.yaml
+++ b/.github/workflows/docker-publish.yaml
@@ -22,7 +22,7 @@ jobs:
           username: weaveworkseksctlci
           password: ${{ secrets.DOCKER_HUB_PASSWORD }}
       - name: Build and push Docker image
-        uses: docker/build-push-action@5176d81f87c23d6fc96624dfdbcd9f3830bbe445 #6.5.0
+        uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 #6.13.0
         with:
           context: .
           push: true
diff --git a/.github/workflows/ecr-publish.yaml b/.github/workflows/ecr-publish.yaml
index b5d390c266..7de0869681 100644
--- a/.github/workflows/ecr-publish.yaml
+++ b/.github/workflows/ecr-publish.yaml
@@ -41,7 +41,7 @@ jobs:
           images: ${{ env.REGISTRY }}/${{ env.REGISTRY_ALIAS }}/${{ env.REPOSITORY }}
 
       - name: Build and push container image to ECR
-        uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 #5.3.0
+        uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 #6.13.0
         with:
           context: .
           push: true