diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ac5749ea1..1ff22d455 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -167,7 +167,7 @@ jobs:
             type=semver,pattern={{version}},prefix=v
       - name: push fips image to CI
         if: ${{ matrix.golang_cross == '1.25-bookworm' }}
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         with:
           context: "dist"
           platforms: linux/amd64,linux/arm64
@@ -202,7 +202,7 @@ jobs:
             org.opencontainers.image.version=${{ github.ref_name }}
       - name: push fips image to prod
         if: ${{ matrix.golang_cross == '1.25-bookworm' }}
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         with:
           context: "dist"
           platforms: linux/amd64,linux/arm64
@@ -248,7 +248,7 @@ jobs:
             type=semver,pattern={{version}},prefix=v
       - name: push std image to CI
         if: ${{ matrix.golang_cross == '1.25-bookworm' }}
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         with:
           context: "dist"
           platforms: linux/amd64,linux/arm64
@@ -282,7 +282,7 @@ jobs:
             org.opencontainers.image.version=${{ github.ref_name }}
       - name: push std image to prod
         if: ${{ matrix.golang_cross == '1.25-bookworm' }}
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         with:
           context: "dist"
           platforms: linux/amd64,linux/arm64
@@ -505,7 +505,7 @@ jobs:
 
           ' | tee Dockerfile
       - name: install on ${{ matrix.distro }}
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         with:
           context: "."
           platforms: linux/${{ matrix.arch }}
@@ -558,7 +558,7 @@ jobs:
 
           ' | tee Dockerfile
       - name: install on ${{ matrix.distro }}
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         with:
           context: "."
           platforms: linux/${{ matrix.arch }}