diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
index 0ecc385642..7a7eebc7c2 100644
--- a/.github/workflows/image.yaml
+++ b/.github/workflows/image.yaml
@@ -63,7 +63,7 @@ jobs:
 
       - name: Build and push
         id: build-and-push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
         with:
           context: ci/dockerfiles/autoscaler-${{ matrix.image_suffix }}
           push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}