diff --git a/.github/workflows/images.yaml b/.github/workflows/images.yaml
index 819c32d8b9..35b9051ade 100644
--- a/.github/workflows/images.yaml
+++ b/.github/workflows/images.yaml
@@ -66,7 +66,7 @@ jobs:
 
     # Setup auth if not a PR.
     - if: github.event_name != 'pull_request'
-      uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa # v2.1.3
+      uses: google-github-actions/auth@8254fb75a33b976a221574d287e93919e6a36f70 # v2.1.6
       with:
         credentials_json: '${{ secrets.GCR_DEVOPS_SERVICE_ACCOUNT_KEY }}'
         export_environment_variables: true