diff --git a/.github/workflows/images.yaml b/.github/workflows/images.yaml
index 3e4345ae..cf635efe 100644
--- a/.github/workflows/images.yaml
+++ b/.github/workflows/images.yaml
@@ -63,7 +63,7 @@ jobs:
       - name: Extract metadata (tags, labels) for Docker
         if: steps.changed-files.outputs.any_changed == 'true' || github.event_name != 'pull_request'
         id: meta
-        uses: docker/metadata-action@9dc751fe249ad99385a2583ee0d084c400eee04e # v5
+        uses: docker/metadata-action@9dc751fe249ad99385a2583ee0d084c400eee04e # v5.4.0
         with:
           images: ${{ env.REGISTRY }}/${{ github.repository }}/${{ matrix.image }}
       - name: Build and push Docker image