diff --git a/.github/workflows/boulder-ci.yml b/.github/workflows/boulder-ci.yml
index 58444e9f5aa..15353e0f0d2 100644
--- a/.github/workflows/boulder-ci.yml
+++ b/.github/workflows/boulder-ci.yml
@@ -79,7 +79,7 @@ jobs:
       - name: Docker Login
         # You may pin to the exact commit or the version.
         # uses: docker/login-action@f3364599c6aa293cdc2b8391b1b56d0c30e45c8a
-        uses: docker/login-action@v3.6.0
+        uses: docker/login-action@v3.7.0
         with:
           # Username used to log against the Docker registry
           username: ${{ secrets.DOCKER_USERNAME}}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ee87484f739..04c70386ada 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -71,7 +71,7 @@ jobs:
         run: docker buildx build . --build-arg "GO_VERSION=${{ matrix.GO_VERSION }}" -f test/ct-test-srv/Dockerfile -t "ghcr.io/letsencrypt/ct-test-srv:${GITHUB_REF_NAME}-go${{ matrix.GO_VERSION }}"
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+        uses: docker/login-action@3227f5311cb93ffd14d13e65d8cc400d30f4dd8a # v3.0.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}