diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 631786f..426cdc7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -519,7 +519,7 @@ jobs:
         id: slack-summary
         # Pinned to a SHA — automatically updated by the update-self-refs job after each release.
         # GitHub Actions requires static `uses:` values, so we can't pin dynamically.
-        uses: docker/docker-agent-action@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
         with:
           agent: agentcatalog/github-action-release-notes
           prompt: |
diff --git a/.github/workflows/review-pr.yml b/.github/workflows/review-pr.yml
index acfaadb..7dc1e6b 100644
--- a/.github/workflows/review-pr.yml
+++ b/.github/workflows/review-pr.yml
@@ -115,7 +115,7 @@ jobs:
       comment-author-type: ${{ steps.read.outputs.comment-author-type }}
     steps:
       - name: Setup credentials
-        uses: docker/docker-agent-action/setup-credentials@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/setup-credentials@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
 
       - name: Verify token for cross-run artifact download
         shell: bash
@@ -311,7 +311,7 @@ jobs:
         if: |
           steps.command.outputs.is_review != 'false' &&
           steps.draft.outputs.skip != 'true'
-        uses: docker/docker-agent-action/setup-credentials@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/setup-credentials@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
 
       - name: Check if org member
         id: membership
@@ -409,7 +409,7 @@ jobs:
           steps.rate.outputs.anomalous != 'true'
         id: run-review
         continue-on-error: true
-        uses: docker/docker-agent-action/review-pr@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/review-pr@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
         with:
           pr-number: ${{ steps.pr.outputs.number }}
           comment-id: ${{ inputs.comment-id || github.event.comment.id }}
@@ -477,7 +477,7 @@ jobs:
 
       - name: Setup credentials
         if: inputs.trigger-run-id != ''
-        uses: docker/docker-agent-action/setup-credentials@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/setup-credentials@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
 
       - name: Verify token for cross-run artifact download
         if: inputs.trigger-run-id != ''
@@ -600,7 +600,7 @@ jobs:
 
       - name: Setup credentials
         if: steps.check.outputs.is_agent == 'true'
-        uses: docker/docker-agent-action/setup-credentials@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/setup-credentials@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
 
       - name: Check authorization
         if: steps.check.outputs.is_agent == 'true'
@@ -759,7 +759,7 @@ jobs:
       - name: Run reply
         if: steps.check.outputs.is_agent == 'true' && steps.auth.outputs.authorized == 'true'
         continue-on-error: true
-        uses: docker/docker-agent-action/review-pr/reply@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/review-pr/reply@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
         with:
           thread-context: ${{ steps.thread.outputs.prompt }}
           comment-id: ${{ steps.feedback.outputs.comment-id }}
@@ -838,7 +838,7 @@ jobs:
 
     steps:
       - name: Setup credentials
-        uses: docker/docker-agent-action/setup-credentials@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/setup-credentials@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
 
       - name: Download trigger context
         if: inputs.trigger-run-id != ''
@@ -904,7 +904,7 @@ jobs:
       - name: Run mention-reply handler
         id: mention-context
         if: steps.resolve-event.outputs.path != ''
-        uses: docker/docker-agent-action/.github/actions/mention-reply@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/.github/actions/mention-reply@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
         env:
           GITHUB_EVENT_PATH: ${{ steps.resolve-event.outputs.path }}
           GITHUB_EVENT_NAME: ${{ steps.resolve-event.outputs.name }}
@@ -916,7 +916,7 @@ jobs:
         if: steps.mention-context.outputs.should-reply == 'true'
         id: run-reply
         continue-on-error: true
-        uses: docker/docker-agent-action/review-pr/mention-reply@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/review-pr/mention-reply@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
         with:
           mention-context: ${{ steps.mention-context.outputs.prompt }}
           owner: ${{ steps.mention-context.outputs.owner }}
diff --git a/.github/workflows/test-e2e-reviewer.yml b/.github/workflows/test-e2e-reviewer.yml
index a2484e1..3949b43 100644
--- a/.github/workflows/test-e2e-reviewer.yml
+++ b/.github/workflows/test-e2e-reviewer.yml
@@ -87,7 +87,7 @@ jobs:
 
       - name: Setup credentials
         if: steps.fork-check.outputs.is_fork != 'true'
-        uses: docker/docker-agent-action/setup-credentials@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/setup-credentials@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
 
       - name: Write synthetic issue_comment event
         if: steps.fork-check.outputs.is_fork != 'true'
@@ -191,7 +191,7 @@ jobs:
 
       - name: Setup credentials
         if: steps.fork-check.outputs.is_fork != 'true'
-        uses: docker/docker-agent-action/setup-credentials@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/setup-credentials@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
 
       - name: Create anchor review comment
         if: steps.fork-check.outputs.is_fork != 'true'
diff --git a/.github/workflows/test-e2e.yml b/.github/workflows/test-e2e.yml
index 55379fe..7c4b516 100644
--- a/.github/workflows/test-e2e.yml
+++ b/.github/workflows/test-e2e.yml
@@ -76,7 +76,7 @@ jobs:
       pr-head-sha: ${{ steps.read.outputs.pr-head-sha }}
     steps:
       - name: Setup credentials
-        uses: docker/docker-agent-action/setup-credentials@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/setup-credentials@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
 
       - name: Verify token for cross-run artifact download
         shell: bash
diff --git a/.github/workflows/update-docker-agent-version.yml b/.github/workflows/update-docker-agent-version.yml
index 7615245..354a739 100644
--- a/.github/workflows/update-docker-agent-version.yml
+++ b/.github/workflows/update-docker-agent-version.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup credentials
-        uses: docker/docker-agent-action/setup-credentials@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+        uses: docker/docker-agent-action/setup-credentials@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
 
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
diff --git a/review-pr/action.yml b/review-pr/action.yml
index ea5e5b3..2077e84 100644
--- a/review-pr/action.yml
+++ b/review-pr/action.yml
@@ -649,7 +649,7 @@ runs:
     - name: Process pending feedback
       if: steps.lock-check.outputs.skip != 'true' && steps.pending-feedback.outputs.has_feedback == 'true'
       continue-on-error: true
-      uses: docker/docker-agent-action@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+      uses: docker/docker-agent-action@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
       env:
         ACTION_PATH: ${{ github.action_path }}
       with:
@@ -793,7 +793,7 @@ runs:
     - name: Run PR Review
       if: steps.lock-check.outputs.skip != 'true'
       id: run-review
-      uses: docker/docker-agent-action@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+      uses: docker/docker-agent-action@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
       env:
         ACTION_PATH: ${{ github.action_path }}
       with:
diff --git a/review-pr/mention-reply/action.yml b/review-pr/mention-reply/action.yml
index 6f64e79..49fd954 100644
--- a/review-pr/mention-reply/action.yml
+++ b/review-pr/mention-reply/action.yml
@@ -85,7 +85,7 @@ runs:
     - name: Run mention reply agent
       id: run-mention-reply
       continue-on-error: true
-      uses: docker/docker-agent-action@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+      uses: docker/docker-agent-action@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
       env:
         ACTION_PATH: ${{ github.action_path }}
       with:
diff --git a/review-pr/reply/action.yml b/review-pr/reply/action.yml
index e576450..41e5679 100644
--- a/review-pr/reply/action.yml
+++ b/review-pr/reply/action.yml
@@ -76,7 +76,7 @@ runs:
     - name: Run reply agent
       id: run-reply
       continue-on-error: true
-      uses: docker/docker-agent-action@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1
+      uses: docker/docker-agent-action@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
       env:
         ACTION_PATH: ${{ github.action_path }}
       with: