diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ef89f5605c4..d9ce2bfe177 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -94,7 +94,7 @@ jobs:
             org.opencontainers.image.description=The toolkit to pack, ship, store, and distribute container content
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
       -
         name: Login to DockerHub
         if: github.event_name != 'pull_request'
diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml
index c843614e8e5..9cfc5769d51 100644
--- a/.github/workflows/conformance.yml
+++ b/.github/workflows/conformance.yml
@@ -22,7 +22,7 @@ jobs:
           fetch-depth: 0
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
 
       -
         name: Build image
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 2681345c652..2ede99ac890 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -28,7 +28,7 @@ jobs:
         id: pages
         uses: actions/configure-pages@v4
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
       - name: Build docs
         uses: docker/bake-action@v4
         with:
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 38d90b1d8be..bfa9449bc3a 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -25,7 +25,7 @@ jobs:
           fetch-depth: 0
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
 
       -
         name: Build image