diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
index 2fe09681..1eaee398 100644
--- a/.github/workflows/docker-build.yml
+++ b/.github/workflows/docker-build.yml
@@ -92,7 +92,7 @@ jobs:
       # No tags  of other metadata at this stage, as we are pushing by digest
       - name: INPUT PREP - Basic Docker metadata for initial build
         id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         with:
           # ONLY use the untested registry address for the image until it is tested
           images: ${{ env.REGISTRY_PROD_ADDR }}/${{ env.UNTESTED_IMAGE_NAME }}
@@ -200,7 +200,7 @@ jobs:
       # This is the full metadata for the manifest
       - name: INPUT PREP - Extract Docker metadata from git repository
         id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         env:
           VALIDATOR_IMAGE_DESCRIPTION: "CloudZero Agent Validator"
         with: