diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index 40a2b8a..cb98de6 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest-amd64
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: docker/setup-qemu-action@v3.6.0
+      - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
       - uses: docker/setup-buildx-action@v3.10.0
 
       - name: Build image
diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index e882d3c..3ee4e4a 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -32,7 +32,7 @@ jobs:
           fetch-tags: true
           ref: "${{ steps.version_extraction.outputs.version_raw }}"
 
-      - uses: docker/setup-qemu-action@v3.6.0
+      - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
       - uses: docker/setup-buildx-action@v3.10.0
 
       - uses: docker/login-action@v3.4.0