diff --git a/.github/workflows/cve-scan.yaml b/.github/workflows/cve-scan.yaml
index 178cbbe..ab06f87 100644
--- a/.github/workflows/cve-scan.yaml
+++ b/.github/workflows/cve-scan.yaml
@@ -59,7 +59,7 @@ jobs:
 
     steps:
       - name: Log in to the Container registry
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
diff --git a/.github/workflows/dockerimage.yaml b/.github/workflows/dockerimage.yaml
index 7afe443..ce5d612 100644
--- a/.github/workflows/dockerimage.yaml
+++ b/.github/workflows/dockerimage.yaml
@@ -108,7 +108,7 @@ jobs:
       # PR builds never push, so they don't need registry credentials either.
       - name: Log in to the Container registry
         if: github.event_name != 'pull_request' && (steps.gate.outputs.backend == 'true' || steps.gate.outputs.shim == 'true' || steps.gate.outputs.press == 'true' || steps.gate.outputs.shelf == 'true')
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}