diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 32cc2a6a7..87e2b62bc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -394,7 +394,7 @@ jobs:
 
     - name: Set up Docker Buildx
       continue-on-error: true
-      uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069
 
     - name: Log in to Container Registry
       continue-on-error: true
diff --git a/.github/workflows/nvsim-server-docker.yml b/.github/workflows/nvsim-server-docker.yml
index 5bf33402d..92a248183 100644
--- a/.github/workflows/nvsim-server-docker.yml
+++ b/.github/workflows/nvsim-server-docker.yml
@@ -29,7 +29,7 @@ jobs:
         with:
           submodules: recursive
 
-      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069
 
       - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9
         with:
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 68375748f..e1afca483 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -202,7 +202,7 @@ jobs:
 
     - name: Set up Docker Buildx
       continue-on-error: true
-      uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
     - name: Build Docker image for scanning
       continue-on-error: true
diff --git a/.github/workflows/sensing-server-docker.yml b/.github/workflows/sensing-server-docker.yml
index 746768f94..9b504ecfa 100644
--- a/.github/workflows/sensing-server-docker.yml
+++ b/.github/workflows/sensing-server-docker.yml
@@ -59,7 +59,7 @@ jobs:
       # by the runner, not built on a separate arm64 host).
       - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130
 
-      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069
 
       - name: Log in to Docker Hub
         # Bypassing docker/login-action@v3: the action kept emitting