diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 57b9e2c..c527aca 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -63,7 +63,7 @@ jobs:
           path: _output/**
 
       - name: Login to Upbound
-        uses: docker/login-action@v1
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
         if: env.XPKG_ACCESS_ID != ''
         with:
           registry: xpkg.upbound.io