diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 5dd62f0..b8efacf 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -37,7 +37,7 @@ jobs:
       # cosign signing; packages is what actually authorises the GHCR push.
       id-token: write
       packages: write
-    uses: docker/github-builder/.github/workflows/build.yml@a492c6d04fd3315f67230809b44d60cc0acd50b3 # v1.16.0
+    uses: docker/github-builder/.github/workflows/build.yml@58cb9f5b71b1836d6f690c1e95effdeb9b98cb8a # v1.17.0
     with:
       context: .
       file: Dockerfile