diff --git a/.github/workflows/confbatstest-build.yaml b/.github/workflows/confbatstest-build.yaml
index daadff8..8221be4 100644
--- a/.github/workflows/confbatstest-build.yaml
+++ b/.github/workflows/confbatstest-build.yaml
@@ -48,7 +48,7 @@ jobs:
 
       - name: Push to ghcr.io
         if: ${{ env.ref_type == 'tag' || env.owner != 'redhat-cop' }} # Stops push running when bots create a PR, which fails due to token
-        uses: redhat-actions/push-to-registry@9986a6552bc4571882a4a67e016b17361412b4df # v2
+        uses: redhat-actions/push-to-registry@5ed88d269cf581ea9ef6dd6806d01562096bee9c # v2
         id: push_image
         with:
           image: ${{ steps.build_image.outputs.image }}
diff --git a/.github/workflows/github-dispatches-build.yaml b/.github/workflows/github-dispatches-build.yaml
index cc80079..0f0657a 100644
--- a/.github/workflows/github-dispatches-build.yaml
+++ b/.github/workflows/github-dispatches-build.yaml
@@ -47,7 +47,7 @@ jobs:
 
       - name: Push to ghcr.io
         if: ${{ env.ref_type == 'tag' || env.owner != 'redhat-cop' }} # Stops push running when bots create a PR, which fails due to token
-        uses: redhat-actions/push-to-registry@9986a6552bc4571882a4a67e016b17361412b4df # v2
+        uses: redhat-actions/push-to-registry@5ed88d269cf581ea9ef6dd6806d01562096bee9c # v2
         with:
           image: ${{ steps.build_image.outputs.image }}
           registry: ghcr.io/${{ github.repository }}
diff --git a/.github/workflows/kyverno-cli-build.yaml b/.github/workflows/kyverno-cli-build.yaml
index d7e7228..d9ad79d 100644
--- a/.github/workflows/kyverno-cli-build.yaml
+++ b/.github/workflows/kyverno-cli-build.yaml
@@ -48,7 +48,7 @@ jobs:
 
       - name: Push to ghcr.io
         if: ${{ env.ref_type == 'tag' || env.owner != 'redhat-cop' }} # Stops push running when bots create a PR, which fails due to token
-        uses: redhat-actions/push-to-registry@9986a6552bc4571882a4a67e016b17361412b4df # v2
+        uses: redhat-actions/push-to-registry@5ed88d269cf581ea9ef6dd6806d01562096bee9c # v2
         with:
           image: ${{ steps.build_image.outputs.image }}
           registry: ghcr.io/${{ github.repository }}
diff --git a/.github/workflows/redhat-csp-download-build.yaml b/.github/workflows/redhat-csp-download-build.yaml
index 85784f3..c901e77 100644
--- a/.github/workflows/redhat-csp-download-build.yaml
+++ b/.github/workflows/redhat-csp-download-build.yaml
@@ -44,7 +44,7 @@ jobs:
 
       - name: Push to ghcr.io
         if: ${{ env.ref_type == 'tag' || env.owner != 'redhat-cop' }} # Stops push running when bots create a PR, which fails due to token
-        uses: redhat-actions/push-to-registry@9986a6552bc4571882a4a67e016b17361412b4df # v2
+        uses: redhat-actions/push-to-registry@5ed88d269cf581ea9ef6dd6806d01562096bee9c # v2
         with:
           image: ${{ steps.build_image.outputs.image }}
           registry: ghcr.io/${{ github.repository }}