diff --git a/.github/workflows/flake_vendorhash.yaml b/.github/workflows/flake_vendorhash.yaml
index 1a1bc827ff..52237f27a1 100644
--- a/.github/workflows/flake_vendorhash.yaml
+++ b/.github/workflows/flake_vendorhash.yaml
@@ -34,7 +34,7 @@ jobs:
         with:
           token: ${{ steps.generate_token.outputs.token }}
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@v12
+        uses: DeterminateSystems/nix-installer-action@v13
       - name: Update ocm vendor hash
         run: nix run .#nixpkgs.nix-update -- --flake --version=skip ocm
       - name: Check diff and create action summary
diff --git a/.github/workflows/push_ocm.yaml b/.github/workflows/push_ocm.yaml
index 8197605ce7..f33d405f9f 100644
--- a/.github/workflows/push_ocm.yaml
+++ b/.github/workflows/push_ocm.yaml
@@ -60,7 +60,7 @@ jobs:
           cache-source: go-build-cache
 
       - name: Build and push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           # supported platforms of https://hub.docker.com/_/golang/tags?page=1&name=1.22-alpine3.19
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index ad2af17518..d19eb3c993 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -142,7 +142,7 @@ jobs:
         go-version-file: '${{ github.workspace }}/go.mod'
 
     - name: Setup Syft
-      uses: anchore/sbom-action/download-syft@e8d2a6937ecead383dfe75190d104edd1f9c5751 # v0.16.0
+      uses: anchore/sbom-action/download-syft@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5 # v0.17.0
 
     - name: Setup Cosign
       uses: sigstore/cosign-installer@v3.5.0
@@ -225,7 +225,7 @@ jobs:
         git push origin ${{ env.RELEASE_VERSION }}
 
     - name: Run GoReleaser
-      uses: goreleaser/goreleaser-action@v5
+      uses: goreleaser/goreleaser-action@v6
       with:
         distribution: goreleaser
         version: latest
diff --git a/.github/workflows/reuse_helper_tool.yaml b/.github/workflows/reuse_helper_tool.yaml
index fd156c7ff8..264144dcec 100644
--- a/.github/workflows/reuse_helper_tool.yaml
+++ b/.github/workflows/reuse_helper_tool.yaml
@@ -8,4 +8,4 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - name: REUSE Compliance Check
-      uses: fsfe/reuse-action@v3
\ No newline at end of file
+      uses: fsfe/reuse-action@v4
\ No newline at end of file