diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5d591dd..c92398b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -99,7 +99,7 @@ jobs:
 
       - name: Build Docker image (PR/non-main)
         if: github.ref != 'refs/heads/main'
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
         with:
           context: .
           push: false
@@ -117,7 +117,7 @@ jobs:
 
       - name: Build and push Docker image (main branch with release)
         if: github.ref == 'refs/heads/main' && steps.semantic.outputs.released == 'true'
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
         with:
           context: .
           push: true
@@ -130,7 +130,7 @@ jobs:
 
       - name: Build Docker image (main branch, no release)
         if: github.ref == 'refs/heads/main' && steps.semantic.outputs.released != 'true'
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
         with:
           context: .
           push: false