diff --git a/.github/workflows/appimage-images.yml b/.github/workflows/appimage-images.yml
index 578033165..991043f70 100644
--- a/.github/workflows/appimage-images.yml
+++ b/.github/workflows/appimage-images.yml
@@ -73,7 +73,7 @@ jobs:
             echo "reference=${APPIMAGE_IMAGE_REPOSITORY}:${MATRIX_TARGET}-${context_key}"
           } >> "${GITHUB_OUTPUT}"
         shell: bash
-      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/build-release-candidate.yml b/.github/workflows/build-release-candidate.yml
index 6cc0ed7a5..21e560840 100644
--- a/.github/workflows/build-release-candidate.yml
+++ b/.github/workflows/build-release-candidate.yml
@@ -144,7 +144,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ needs.metadata.outputs.commit }}
-      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -690,7 +690,7 @@ jobs:
             'libatrinik/**/*.h') }}
           restore-keys: |
             classic-${{ runner.os }}-${{ runner.arch }}-windows-client-ccache-v1-${{ env.WINDOWS_BUILD_CACHE_EPOCH }}-
-      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -772,7 +772,7 @@ jobs:
             'libatrinik/**/*.h') }}
           restore-keys: |
             classic-${{ runner.os }}-${{ runner.arch }}-windows-server-ccache-v1-${{ env.WINDOWS_BUILD_CACHE_EPOCH }}-
-      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/package-release.yml b/.github/workflows/package-release.yml
index 9c5d5102f..0e66eb290 100644
--- a/.github/workflows/package-release.yml
+++ b/.github/workflows/package-release.yml
@@ -243,7 +243,7 @@ jobs:
           name: complete-release-candidate-${{ env.RELEASE_TAG }}
           path: build/release
           run-id: ${{ inputs.candidate_run_id || github.run_id }}
-      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/promote-latest.yml b/.github/workflows/promote-latest.yml
index 78e1716be..067296e1a 100644
--- a/.github/workflows/promote-latest.yml
+++ b/.github/workflows/promote-latest.yml
@@ -60,7 +60,7 @@ jobs:
       - id: revision
         name: Resolve the tagged revision
         run: echo "commit=$(git rev-parse HEAD)" >>"${GITHUB_OUTPUT}"
-      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/publish-development-server.yml b/.github/workflows/publish-development-server.yml
index 70f484ee6..9274fd3a3 100644
--- a/.github/workflows/publish-development-server.yml
+++ b/.github/workflows/publish-development-server.yml
@@ -59,7 +59,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
           ref: ${{ github.sha }}
-      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/qualify-server-image.yml b/.github/workflows/qualify-server-image.yml
index 3a3fbaf13..d60c76037 100644
--- a/.github/workflows/qualify-server-image.yml
+++ b/.github/workflows/qualify-server-image.yml
@@ -42,7 +42,7 @@ jobs:
           mkdir -p build/server-image-evidence
           git show -s --format=fuller HEAD > build/server-image-evidence/source.txt
           docker version > build/server-image-evidence/docker-version.txt
-      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 73b2175da..ba67d4334 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -80,7 +80,7 @@ jobs:
           node tools/tests/test_release_policy.cjs
           python3 tools/verify_import_history.py
       - if: steps.batch.outputs.proceed == 'true'
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
+        uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}