diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 7105936..c82ba1d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -81,7 +81,7 @@ jobs:
 
       # Docker credentials are also used by the unprivileged signing step.
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+        uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
         if: >
           github.event_name != 'pull_request' &&
           (