diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml
index 90d8e034..03e86eaa 100644
--- a/.github/workflows/build-push.yml
+++ b/.github/workflows/build-push.yml
@@ -118,7 +118,7 @@ jobs:
         with:
           image: ${{ env.REGISTRY }}/${{ github.repository }}@${{ steps.build-and-push-base.outputs.digest }}
           dependency-snapshot: true
-      - uses: actions/dependency-review-action@5bbc3ba658137598168acb2ab73b21c432dd411b # v4.2.5
+      - uses: actions/dependency-review-action@e58c696e52cac8e62d61cc21fda89565d71505d7 # v4.3.1
         if: github.event_name == 'pull_request'
         with:
           comment-summary-in-pr: on-failure