diff --git a/.github/workflows/qns.yml b/.github/workflows/qns.yml
index d0a9522832..b31eb46d98 100644
--- a/.github/workflows/qns.yml
+++ b/.github/workflows/qns.yml
@@ -53,7 +53,7 @@ jobs:
             # set latest tag for default branch
             type=raw,value=latest,enable={{is_default_branch}}
 
-      - uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
+      - uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
         if: github.event_name != 'pull_request'
         with:
           push: true
@@ -64,7 +64,7 @@ jobs:
           cache-to: type=gha,mode=max
           platforms: 'linux/amd64, linux/arm64'
 
-      - uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
+      - uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
         id: docker_build_and_push
         with:
           tags: ${{ steps.meta.outputs.tags }}