diff --git a/.github/workflows/security-container.yml b/.github/workflows/security-container.yml
index c2f5ab7..faca950 100644
--- a/.github/workflows/security-container.yml
+++ b/.github/workflows/security-container.yml
@@ -129,7 +129,7 @@ jobs:
         # login step in a wrapper or in the caller's workflow before
         # invoking this reusable.
         if: startsWith(inputs.image-ref, 'ghcr.io/')
-        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v4.1.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}