diff --git a/.github/actions/build-docker-images/action.yml b/.github/actions/build-docker-images/action.yml
index afb4058d6f4..06d53d5c764 100644
--- a/.github/actions/build-docker-images/action.yml
+++ b/.github/actions/build-docker-images/action.yml
@@ -64,7 +64,7 @@ runs:
 
     - name: Build hash-graph image
       if: inputs.hash-graph == 'true' && github.event.pull_request.head.repo.full_name == github.repository
-      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
+      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
       with:
         context: .
         file: apps/hash-graph/docker/Dockerfile
@@ -87,7 +87,7 @@ runs:
 
     - name: Build hash-graph image (fork)
       if: inputs.hash-graph == 'true' && github.event.pull_request.head.repo.full_name != github.repository
-      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
+      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
       with:
         context: .
         file: apps/hash-graph/docker/Dockerfile
@@ -103,7 +103,7 @@ runs:
 
     - name: Build hash-ai-worker-ts image
       if: inputs.hash-ai-worker-ts == 'true' && github.event.pull_request.head.repo.full_name == github.repository
-      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
+      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
       with:
         context: .
         file: apps/hash-ai-worker-ts/docker/Dockerfile
@@ -122,7 +122,7 @@ runs:
 
     - name: Build hash-ai-worker-ts image (fork)
       if: inputs.hash-ai-worker-ts == 'true' && github.event.pull_request.head.repo.full_name != github.repository
-      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
+      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
       with:
         context: .
         file: apps/hash-ai-worker-ts/docker/Dockerfile
@@ -134,7 +134,7 @@ runs:
 
     - name: Build hash-integration-worker image
       if: inputs.hash-integration-worker == 'true' && github.event.pull_request.head.repo.full_name == github.repository
-      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
+      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
       with:
         context: .
         file: apps/hash-integration-worker/docker/Dockerfile
@@ -151,7 +151,7 @@ runs:
 
     - name: Build hash-integration-worker image (fork)
       if: inputs.hash-integration-worker == 'true' && github.event.pull_request.head.repo.full_name != github.repository
-      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
+      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
       with:
         context: .
         file: apps/hash-integration-worker/docker/Dockerfile
@@ -161,7 +161,7 @@ runs:
 
     - name: Build hash-api image
       if: inputs.hash-api == 'true' && github.event.pull_request.head.repo.full_name == github.repository
-      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
+      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
       with:
         context: .
         file: infra/docker/api/prod/Dockerfile
@@ -178,7 +178,7 @@ runs:
 
     - name: Build hash-api image (fork)
       if: inputs.hash-api == 'true' && github.event.pull_request.head.repo.full_name != github.repository
-      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
+      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
       with:
         context: .
         file: infra/docker/api/prod/Dockerfile
diff --git a/.github/actions/docker-build-push/action.yml b/.github/actions/docker-build-push/action.yml
index 769d8a4720f..efe8b6984ae 100644
--- a/.github/actions/docker-build-push/action.yml
+++ b/.github/actions/docker-build-push/action.yml
@@ -61,7 +61,7 @@ runs:
 
     # Build images and push to ECR
     - name: Build and push ${{inputs.SHORTNAME}} image
-      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
+      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
       env:
         GH_RUN_ID: ${{ github.run_id }}
       with: