diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 76b4ba63129..5b1ae9c7dab 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -49,7 +49,7 @@ jobs:
         run: go get golang.org/x/tools/cmd/goimports
 
       - name: Set up Cloud SDK
-        uses: google-github-actions/auth@b258a9f230b36c9fa86dfaa43d1906bd76399edb # v0.6.0
+        uses: google-github-actions/auth@dafc92490a98acbdec38e6eb649f05d55e632447 # v0.6.0
         with:
           workload_identity_provider: 'projects/498091336538/locations/global/workloadIdentityPools/githubactions/providers/sigstore-cosign'
           service_account: 'github-actions@projectsigstore.iam.gserviceaccount.com'