diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d0038fb4..b627a6d2 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -60,7 +60,7 @@ jobs:
           submodules: true
 
       - name: Setup runner
-        uses: projectbluefin/actions/bootc-build/setup-runner@2564c7bb30143104a9a1aebb4254359e174a8d81 # v1
+        uses: projectbluefin/actions/bootc-build/setup-runner@d0d12d2577eb5a629b411ba86973f971bc0639a3 # v1
         with:
           storage-backend: btrfs
           update-podman: "true"
@@ -112,7 +112,7 @@ jobs:
 
       - name: Scan image for CVEs
         if: github.event_name != 'merge_group'
-        uses: projectbluefin/actions/bootc-build/scan-image@2564c7bb30143104a9a1aebb4254359e174a8d81 # v1
+        uses: projectbluefin/actions/bootc-build/scan-image@d0d12d2577eb5a629b411ba86973f971bc0639a3 # v1
         with:
           input: /tmp/scan-image.tar
           severity-threshold: CRITICAL
@@ -122,7 +122,7 @@ jobs:
       - name: Push image
         id: push
         if: github.event_name != 'pull_request' && github.event_name != 'merge_group'
-        uses: projectbluefin/actions/bootc-build/push-image@2564c7bb30143104a9a1aebb4254359e174a8d81 # v1
+        uses: projectbluefin/actions/bootc-build/push-image@d0d12d2577eb5a629b411ba86973f971bc0639a3 # v1
         with:
           image-name: ${{ env.IMAGE_NAME }}
           tags: ${{ steps.generate-tags.outputs.local_tag }}
@@ -179,7 +179,7 @@ jobs:
 
       - name: Create multi-arch manifest
         id: create-manifest
-        uses: projectbluefin/actions/bootc-build/create-manifest@2564c7bb30143104a9a1aebb4254359e174a8d81 # v1
+        uses: projectbluefin/actions/bootc-build/create-manifest@d0d12d2577eb5a629b411ba86973f971bc0639a3 # v1
         with:
           image-name: ${{ env.IMAGE_NAME }}
           digests-json: ${{ steps.digests.outputs.json }}
@@ -197,7 +197,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Sign, generate SBOM, and attest
-        uses: projectbluefin/actions/bootc-build/sign-and-publish@2564c7bb30143104a9a1aebb4254359e174a8d81 # v1
+        uses: projectbluefin/actions/bootc-build/sign-and-publish@d0d12d2577eb5a629b411ba86973f971bc0639a3 # v1
         with:
           image: ${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}
           digest: ${{ steps.create-manifest.outputs.digest }}