diff --git a/.github/workflows/build-image.yml b/.github/workflows/build-image.yml
index 91628b9..f4518ea 100644
--- a/.github/workflows/build-image.yml
+++ b/.github/workflows/build-image.yml
@@ -300,7 +300,7 @@ jobs:
 
       - name: Azure login (federated OIDC; only when storage vars are configured)
         if: ${{ inputs.skip_heavy_build == false && vars.AZURE_STORAGE_ACCOUNT != '' && vars.AZURE_STORAGE_CONTAINER != '' }}
-        uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1
+        uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
         with:
           client-id: ${{ vars.AZURE_CLIENT_ID }}
           tenant-id: ${{ vars.AZURE_TENANT_ID }}