diff --git a/.github/workflows/containers.build.yaml b/.github/workflows/containers.build.yaml
index b948262e0088a..921d31f2e0291 100644
--- a/.github/workflows/containers.build.yaml
+++ b/.github/workflows/containers.build.yaml
@@ -211,7 +211,7 @@ jobs:
           password: ${{ secrets.GHCR_TOKEN }}
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5
+        uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5
         with:
           # list of Docker images to use as base name for tags
           images: |
diff --git a/containers/apps/kube-sa-proxy/.github/workflows/docker-publish.yml b/containers/apps/kube-sa-proxy/.github/workflows/docker-publish.yml
index 3aeec2bbf07df..15510dfa64a63 100644
--- a/containers/apps/kube-sa-proxy/.github/workflows/docker-publish.yml
+++ b/containers/apps/kube-sa-proxy/.github/workflows/docker-publish.yml
@@ -29,7 +29,7 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5
+        uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}