diff --git a/.github/workflows/component-build.yml b/.github/workflows/component-build.yml
index 6f3ca0d..8990f0f 100644
--- a/.github/workflows/component-build.yml
+++ b/.github/workflows/component-build.yml
@@ -161,7 +161,7 @@ jobs:
       # docker-container buildx driver (the default docker driver does not support cache-to).
       - name: Set up Docker Buildx
         if: ${{ inputs.enable-buildkit-cache }}
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
       - name: Docker meta
         id: meta
         uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6