diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c150ce5..60c3152 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -141,7 +141,7 @@ jobs:
             type=raw,value=dev-latest,enable=${{ github.ref == 'refs/heads/dev' }}
 
       - name: Build and push app image
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
         with:
           context: .
           target: app
@@ -155,7 +155,7 @@ jobs:
             VERSION=${{ github.sha }}
 
       - name: Build and push migrate image
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
         with:
           context: .
           target: migrate
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 5c21d5c..e1c48b6 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -149,7 +149,7 @@ jobs:
             type=raw,value=latest
 
       - name: Build and push app image
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
         with:
           context: .
           target: app
@@ -163,7 +163,7 @@ jobs:
             VERSION=${{ needs.release-please.outputs.tag_name }}
 
       - name: Build and push migrate image
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
         with:
           context: .
           target: migrate