diff --git a/.github/workflows/bake.yml b/.github/workflows/bake.yml
index c3dd25a5..b5881b6e 100644
--- a/.github/workflows/bake.yml
+++ b/.github/workflows/bake.yml
@@ -989,7 +989,7 @@ jobs:
       -
         name: Configure AWS credentials
         if: ${{ needs.registry-identities.outputs.aws-ecr-enabled == 'true' }}
-        uses: aws-actions/configure-aws-credentials@99214aa6889fcddfa57764031d71add364327e59 # v6.1.3
+        uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
         with:
           role-to-assume: ${{ needs.registry-identities.outputs.aws-ecr-role-to-assume }}
           aws-region: ${{ needs.registry-identities.outputs.aws-ecr-region }}
@@ -1209,7 +1209,7 @@ jobs:
       -
         name: Configure AWS credentials
         if: ${{ inputs.push && inputs.output == 'image' && needs.registry-identities.outputs.aws-ecr-enabled == 'true' }}
-        uses: aws-actions/configure-aws-credentials@99214aa6889fcddfa57764031d71add364327e59 # v6.1.3
+        uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
         with:
           role-to-assume: ${{ needs.registry-identities.outputs.aws-ecr-role-to-assume }}
           aws-region: ${{ needs.registry-identities.outputs.aws-ecr-region }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d88edfec..47cf76e6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -855,7 +855,7 @@ jobs:
       -
         name: Configure AWS credentials
         if: ${{ needs.registry-identities.outputs.aws-ecr-enabled == 'true' }}
-        uses: aws-actions/configure-aws-credentials@99214aa6889fcddfa57764031d71add364327e59 # v6.1.3
+        uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
         with:
           role-to-assume: ${{ needs.registry-identities.outputs.aws-ecr-role-to-assume }}
           aws-region: ${{ needs.registry-identities.outputs.aws-ecr-region }}
@@ -1071,7 +1071,7 @@ jobs:
       -
         name: Configure AWS credentials
         if: ${{ inputs.push && inputs.output == 'image' && needs.registry-identities.outputs.aws-ecr-enabled == 'true' }}
-        uses: aws-actions/configure-aws-credentials@99214aa6889fcddfa57764031d71add364327e59 # v6.1.3
+        uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
         with:
           role-to-assume: ${{ needs.registry-identities.outputs.aws-ecr-role-to-assume }}
           aws-region: ${{ needs.registry-identities.outputs.aws-ecr-region }}