diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ef89f5605c4..3f5c74ba8e7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -94,7 +94,7 @@ jobs:
             org.opencontainers.image.description=The toolkit to pack, ship, store, and distribute container content
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
       -
         name: Login to DockerHub
         if: github.event_name != 'pull_request'
diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml
index c843614e8e5..afba66a8e33 100644
--- a/.github/workflows/conformance.yml
+++ b/.github/workflows/conformance.yml
@@ -22,7 +22,7 @@ jobs:
           fetch-depth: 0
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
       -
         name: Build image
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 2681345c652..f6263e4678a 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -28,7 +28,7 @@ jobs:
         id: pages
         uses: actions/configure-pages@v4
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
       - name: Build docs
         uses: docker/bake-action@v4
         with:
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 38d90b1d8be..6e06e8ffe29 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -25,7 +25,7 @@ jobs:
           fetch-depth: 0
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
       -
         name: Build image