diff --git a/.github/workflows/publish-container-security-patch.yml b/.github/workflows/publish-container-security-patch.yml
index c9ff44b..641ef71 100644
--- a/.github/workflows/publish-container-security-patch.yml
+++ b/.github/workflows/publish-container-security-patch.yml
@@ -82,7 +82,7 @@ jobs:
           ref: ${{ needs.validate.outputs.source_sha }}
 
       - name: Set up an attestation-capable BuildKit builder
-        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
         with:
           driver: docker-container
 
diff --git a/.github/workflows/publish-first-cohort.yml b/.github/workflows/publish-first-cohort.yml
index f4db523..87c1aa6 100644
--- a/.github/workflows/publish-first-cohort.yml
+++ b/.github/workflows/publish-first-cohort.yml
@@ -270,7 +270,7 @@ jobs:
           ref: ${{ needs.validate.outputs.source_sha }}
 
       - name: Set up an attestation-capable BuildKit builder
-        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
         with:
           driver: docker-container
 
diff --git a/.github/workflows/publish-worker-container.yml b/.github/workflows/publish-worker-container.yml
index eaa5978..2088478 100644
--- a/.github/workflows/publish-worker-container.yml
+++ b/.github/workflows/publish-worker-container.yml
@@ -82,7 +82,7 @@ jobs:
           ref: ${{ needs.validate.outputs.source_sha }}
 
       - name: Set up an attestation-capable BuildKit builder
-        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
         with:
           driver: docker-container