diff --git a/.github/workflows/build-actions-runner.yaml b/.github/workflows/build-actions-runner.yaml
index 0085a38c6..5fee8418f 100644
--- a/.github/workflows/build-actions-runner.yaml
+++ b/.github/workflows/build-actions-runner.yaml
@@ -62,7 +62,7 @@ jobs:
             name=ghcr.io/${{ github.repository_owner }}/actions-runner
 
       - name: Build and push image
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: ./containers/actions-runner
           platforms: linux/amd64
diff --git a/.github/workflows/build-mdq.yml b/.github/workflows/build-mdq.yml
index 5136c5cc8..c0d511325 100644
--- a/.github/workflows/build-mdq.yml
+++ b/.github/workflows/build-mdq.yml
@@ -63,7 +63,7 @@ jobs:
             name=ghcr.io/${{ github.repository_owner }}/mdq
 
       - name: Build and push image
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: ./containers/mdq
           platforms: linux/amd64
diff --git a/.github/workflows/build-outline-role-sync.yml b/.github/workflows/build-outline-role-sync.yml
index 06283817f..f2aaf0eb1 100644
--- a/.github/workflows/build-outline-role-sync.yml
+++ b/.github/workflows/build-outline-role-sync.yml
@@ -72,7 +72,7 @@ jobs:
             type=raw,value=release,enable=${{ github.event_name == 'release' }}
 
       - name: Build and push image
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: ./services/outline-role-sync
           platforms: linux/amd64
diff --git a/.github/workflows/shared-zizmor.yml b/.github/workflows/shared-zizmor.yml
index b0ef860f0..0d3ed8450 100644
--- a/.github/workflows/shared-zizmor.yml
+++ b/.github/workflows/shared-zizmor.yml
@@ -29,6 +29,6 @@ jobs:
           private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
+        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
         with:
           token: ${{ steps.token.outputs.token }}
diff --git a/actions/image-build/action.yml b/actions/image-build/action.yml
index a5528404b..113591538 100644
--- a/actions/image-build/action.yml
+++ b/actions/image-build/action.yml
@@ -87,7 +87,7 @@ runs:
 
     - name: Build and push image
       id: build
-      uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+      uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
       with:
         context: ${{ inputs.context }}
         file: ${{ inputs.dockerfile }}