diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index dcfed7db..314b616a 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -83,7 +83,7 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.5
 
       - name: Build, tag, and push Document Inference Lambda image to ECR
         id: build-document-inference-image
diff --git a/.github/workflows/eval.yml b/.github/workflows/eval.yml
index 32a7b789..5d2818d4 100644
--- a/.github/workflows/eval.yml
+++ b/.github/workflows/eval.yml
@@ -85,7 +85,7 @@ jobs:
       - name: Login to Amazon ECR
         id: login-ecr
         if: ${{ github.event.inputs.should_rebuild_images == 'true' }}
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.5
 
       - name: Build, tag, and push Evaluation Lambda image to ECR
         id: build-evaluation-image
@@ -201,7 +201,7 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.5
 
       - name: Invoke Evaluation Lambda
         id: invoke-evaluation-lambda
diff --git a/.github/workflows/plan.yml b/.github/workflows/plan.yml
index f17737fd..180c753d 100644
--- a/.github/workflows/plan.yml
+++ b/.github/workflows/plan.yml
@@ -41,7 +41,7 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.5
 
       - name: Setup OpenTofu
         uses: opentofu/setup-opentofu@v2