diff --git a/.github/workflows/secure-supply-chain.yml b/.github/workflows/secure-supply-chain.yml
index a8927e4..e42db34 100644
--- a/.github/workflows/secure-supply-chain.yml
+++ b/.github/workflows/secure-supply-chain.yml
@@ -102,7 +102,7 @@ jobs:
         uses: aws-actions/amazon-ecr-login@v2
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       # Authenticate to Chainguard registry so the builder can pull
       # the base image (cgr.dev/virtualiseme.net.au/*).
diff --git a/.github/workflows/security-comparison.yml b/.github/workflows/security-comparison.yml
index 53a73d2..09d03f6 100644
--- a/.github/workflows/security-comparison.yml
+++ b/.github/workflows/security-comparison.yml
@@ -56,7 +56,7 @@ jobs:
           password: ${{ secrets.CHAINGUARD_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       # ── Build standard (upstream) image ───────────────────────────────────
       - name: Build Standard Image