diff --git a/.gitea/workflows/build-java.yml b/.gitea/workflows/build-java.yml
index f128297..52fbcb0 100644
--- a/.gitea/workflows/build-java.yml
+++ b/.gitea/workflows/build-java.yml
@@ -23,7 +23,7 @@ jobs:
         password: ${{ secrets.REGISTRY_PASSWORD }}
 
     - name: Build and Push
-      uses: docker/build-push-action@v5
+      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
       with:
         context: .
         file: java/Dockerfile.java${{ matrix.java_version }}
diff --git a/.gitea/workflows/build-php.yml b/.gitea/workflows/build-php.yml
index 04b17c0..ef2bbce 100644
--- a/.gitea/workflows/build-php.yml
+++ b/.gitea/workflows/build-php.yml
@@ -23,7 +23,7 @@ jobs:
         password: ${{ secrets.REGISTRY_PASSWORD }}
 
     - name: Build and Push
-      uses: docker/build-push-action@v5
+      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
       with:
         context: .
         file: php/Dockerfile.php${{ matrix.php_version }}
diff --git a/.gitea/workflows/build-python.yml b/.gitea/workflows/build-python.yml
index d346bda..e818560 100644
--- a/.gitea/workflows/build-python.yml
+++ b/.gitea/workflows/build-python.yml
@@ -20,7 +20,7 @@ jobs:
         password: ${{ secrets.REGISTRY_PASSWORD }}
 
     - name: Build and Push
-      uses: docker/build-push-action@v5
+      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
       with:
         context: .
         file: python/Dockerfile.python3