diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index c80722f57b97..d08eb7a4aac1 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -212,7 +212,7 @@ jobs:
           echo "https://github.com/opf/openproject/commits/$INPUTS_BRANCH" > PRODUCT_URL
           date -u +"%Y-%m-%dT%H:%M:%SZ" > RELEASE_DATE
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
+        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4
       - name: Set up Docker Buildx
         id: buildx
         uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
diff --git a/.github/workflows/hocuspocus-docker.yml b/.github/workflows/hocuspocus-docker.yml
index 6f29c3dbe6c3..580b420b777f 100644
--- a/.github/workflows/hocuspocus-docker.yml
+++ b/.github/workflows/hocuspocus-docker.yml
@@ -112,7 +112,7 @@ jobs:
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
+        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4