diff --git a/.github/workflows/nightly-oras.yml b/.github/workflows/nightly-oras.yml
index 1761180..da7c9d7 100644
--- a/.github/workflows/nightly-oras.yml
+++ b/.github/workflows/nightly-oras.yml
@@ -114,7 +114,7 @@ jobs:
           path: .
 
       - name: Install ORAS
-        uses: oras-project/setup-oras@38de303aac69abb66f3e6255b7198bff35f323e3 # v2.0.0
+        uses: oras-project/setup-oras@1d808f7d7f6995cc68b7bf507bfe5c5446e1dc9d # v2.0.1
 
       - name: Install cosign
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
diff --git a/.github/workflows/release-oras.yml b/.github/workflows/release-oras.yml
index 97f9de9..070e6e3 100644
--- a/.github/workflows/release-oras.yml
+++ b/.github/workflows/release-oras.yml
@@ -93,7 +93,7 @@ jobs:
           path: .
 
       - name: Install ORAS
-        uses: oras-project/setup-oras@38de303aac69abb66f3e6255b7198bff35f323e3 # v2.0.0
+        uses: oras-project/setup-oras@1d808f7d7f6995cc68b7bf507bfe5c5446e1dc9d # v2.0.1
 
       - name: Install cosign
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2