diff --git a/.github/workflows/images.yaml b/.github/workflows/images.yaml
index 819c32d8b..86246114d 100644
--- a/.github/workflows/images.yaml
+++ b/.github/workflows/images.yaml
@@ -66,7 +66,7 @@ jobs:
 
     # Setup auth if not a PR.
     - if: github.event_name != 'pull_request'
-      uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa # v2.1.3
+      uses: google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
       with:
         credentials_json: '${{ secrets.GCR_DEVOPS_SERVICE_ACCOUNT_KEY }}'
         export_environment_variables: true