diff --git a/.github/workflows/qns.yml b/.github/workflows/qns.yml
index ff06efb3c6..d5ff95b7b2 100644
--- a/.github/workflows/qns.yml
+++ b/.github/workflows/qns.yml
@@ -54,7 +54,7 @@ jobs:
             # set latest tag for default branch
             type=raw,value=latest,enable={{is_default_branch}}
 
-      - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
+      - uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
         if: github.event_name != 'pull_request'
         with:
           push: true
@@ -65,7 +65,7 @@ jobs:
           cache-to: type=gha,mode=max
           platforms: 'linux/amd64, linux/arm64'
 
-      - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
+      - uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
         id: docker_build_and_push
         with:
           tags: ${{ steps.meta.outputs.tags }}