diff --git a/.github/workflows/qa.yml b/.github/workflows/qa.yml
index 28f1097..473d521 100644
--- a/.github/workflows/qa.yml
+++ b/.github/workflows/qa.yml
@@ -144,7 +144,7 @@ jobs:
       - name: Docker meta
         if: github.event_name == 'pull_request' || github.event_name == 'push'
         id: meta
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
+        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6
         with:
           images: |
             ghcr.io/settlemint/network-bootstrapper