diff --git a/.github/workflows/images.yaml b/.github/workflows/images.yaml
index 819c32d8b9..c34d041c35 100644
--- a/.github/workflows/images.yaml
+++ b/.github/workflows/images.yaml
@@ -66,7 +66,7 @@ jobs:
 
     # Setup auth if not a PR.
     - if: github.event_name != 'pull_request'
-      uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa # v2.1.3
+      uses: google-github-actions/auth@62cf5bd3e4211a0a0b51f2c6d6a37129d828611d # v2.1.5
       with:
         credentials_json: '${{ secrets.GCR_DEVOPS_SERVICE_ACCOUNT_KEY }}'
         export_environment_variables: true