diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 9e2c1202ab..6e0e6e01d5 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -62,7 +62,7 @@ jobs:
             # tag event
             type=ref,event=tag
       - name: Build and push cs Docker image
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
           file: Dockerfile-react
           context: .
@@ -72,7 +72,7 @@ jobs:
           tags: ${{ steps.meta-cs.outputs.tags }}
           labels: ${{ steps.meta-cs.outputs.labels }}
       - name: Build and push cs-renderer Docker image
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
           file: Dockerfile-react
           context: .