diff --git a/.github/workflows/hermetic-builder.yml b/.github/workflows/hermetic-builder.yml
index d94ca3d9..afb34dee 100644
--- a/.github/workflows/hermetic-builder.yml
+++ b/.github/workflows/hermetic-builder.yml
@@ -36,7 +36,7 @@ jobs:
 
       - name: Docker metadata
         id: meta
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         with:
           images: ${{ steps.image.outputs.name }}
           tags: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 30702b99..35bc723b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -667,7 +667,7 @@ jobs:
       - name: Docker metadata
         id: meta
         if: steps.oci_gate.outputs.required == 'true'
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         with:
           images: ${{ steps.image.outputs.name }}
           tags: |