diff --git a/.github/workflows/dmr-daily-check.yml b/.github/workflows/dmr-daily-check.yml
index dd67488cd..b509f4514 100644
--- a/.github/workflows/dmr-daily-check.yml
+++ b/.github/workflows/dmr-daily-check.yml
@@ -22,7 +22,7 @@ jobs:
     
     steps:      
       - name: Set up Docker
-        uses: docker/setup-docker-action@6d7cfa65f60a9dda7b46e5513fa982536f3c9877
+        uses: docker/setup-docker-action@77e84dbf09b47d1e29270283c22f16145aa85ca1
 
       - name: Install docker-model-plugin
         run: |
diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml
index 9829fc85d..9c8738340 100644
--- a/.github/workflows/e2e-test.yml
+++ b/.github/workflows/e2e-test.yml
@@ -44,7 +44,7 @@ jobs:
 
       - name: Set up Docker
         if: matrix.os == 'ubuntu-latest'
-        uses: docker/setup-docker-action@6d7cfa65f60a9dda7b46e5513fa982536f3c9877
+        uses: docker/setup-docker-action@77e84dbf09b47d1e29270283c22f16145aa85ca1
 
       - name: Install build dependencies (Linux)
         if: matrix.os == 'ubuntu-latest'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 45178a94b..35a962d70 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -199,7 +199,7 @@ jobs:
           fetch-depth: 0
 
       - name: Generate release notes
-        uses: docker/docker-agent-action@774b6e0e60d6c648b0f2dc43bd5221377a0a7420 # v2.0.2
+        uses: docker/docker-agent-action@baf90543d81f5de59751dfd10e6cf45e21a5a982 # v2.0.3
         with:
           agent: .github/agents/release-notes-generator.yaml
           anthropic-api-key: ${{ secrets.ANTHROPIC_API_KEY }}
@@ -339,7 +339,7 @@ jobs:
           echo "openvino=$OPENVINO_IMAGE" >> "$GITHUB_OUTPUT"
 
       - name: Log in to DockerHub
-        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0
+        uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c
         with:
           username: "docker"
           password: ${{ secrets.ORG_ACCESS_TOKEN }}
@@ -491,7 +491,7 @@ jobs:
       # pushing an already-existing tag fails with "403 denied". Detect the
       # already-published tag on Docker Hub and skip the trigger instead.
       - name: Log in to DockerHub
-        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0
+        uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c
         with:
           username: "docker"
           password: ${{ secrets.ORG_ACCESS_TOKEN }}