diff --git a/.github/workflows/actionlint.yaml b/.github/workflows/actionlint.yaml
index 76b17f26..709ec550 100644
--- a/.github/workflows/actionlint.yaml
+++ b/.github/workflows/actionlint.yaml
@@ -38,6 +38,6 @@ jobs:
           set -xv
           yamls=$(find . -name "*.y*ml" -not -path "*/.chainguard/source.yaml" -not -path "*/action.y*ml" -not -path "*/.github/chainguard/release.sts.yaml" -not -path "./.github/*.yml" -not -path "./.github/*.yaml" -exec echo {} +)
           echo "files=${yamls}" >> "$GITHUB_OUTPUT"
-      - uses: reviewdog/action-actionlint@d63ba7532e0942965320cd8d73cbae4c7b3c5283 # v1.73.1
+      - uses: reviewdog/action-actionlint@dbe5299849118fd6f099ba563d263d770955a64a # v1.73.2
         with:
           actionlint_flags: ${{ steps.get_yamls.outputs.files }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index d11cedb6..7cb03b68 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -85,7 +85,7 @@ jobs:
 
       - name: Bump and push Git tag
         id: tag
-        uses: chainguard-dev/actions/git-tag@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+        uses: chainguard-dev/actions/git-tag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
         if: steps.check.outputs.bump == 'yes'
         with:
           token: ${{ steps.octo-sts.outputs.token }}
diff --git a/.github/workflows/test-argo-workflows.yaml b/.github/workflows/test-argo-workflows.yaml
index 96efcf3c..97c3a226 100644
--- a/.github/workflows/test-argo-workflows.yaml
+++ b/.github/workflows/test-argo-workflows.yaml
@@ -41,7 +41,7 @@ jobs:
           persist-credentials: false
 
       - name: Install Kind
-        uses: chainguard-dev/actions/setup-kind@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+        uses: chainguard-dev/actions/setup-kind@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
 
       - name: Install Argo Workflows
         uses: ./setup-argo-workflows
diff --git a/.github/workflows/test-setup-hakn.yaml b/.github/workflows/test-setup-hakn.yaml
index 2aafd7bf..b690214c 100644
--- a/.github/workflows/test-setup-hakn.yaml
+++ b/.github/workflows/test-setup-hakn.yaml
@@ -46,4 +46,4 @@ jobs:
 
       - name: Collect diagnostics
         if: ${{ failure() }}
-        uses: chainguard-dev/actions/kind-diag@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+        uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/.github/workflows/test-setup-kind.yaml b/.github/workflows/test-setup-kind.yaml
index 38819a37..d665d20b 100644
--- a/.github/workflows/test-setup-kind.yaml
+++ b/.github/workflows/test-setup-kind.yaml
@@ -144,7 +144,7 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+      uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         artifact-name: logs.${{ matrix.k8s-version }}
 
@@ -216,7 +216,7 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+      uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         artifact-name: logs.kvm-available
 
@@ -279,6 +279,6 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+      uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         artifact-name: logs.kvm-unavailable
diff --git a/.github/workflows/test-setup-knative-eventing.yaml b/.github/workflows/test-setup-knative-eventing.yaml
index c7c6ccb3..e1af78f5 100644
--- a/.github/workflows/test-setup-knative-eventing.yaml
+++ b/.github/workflows/test-setup-knative-eventing.yaml
@@ -50,4 +50,4 @@ jobs:
 
       - name: Collect diagnostics
         if: ${{ failure() }}
-        uses: chainguard-dev/actions/kind-diag@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+        uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/.github/workflows/test-setup-monitoring.yaml b/.github/workflows/test-setup-monitoring.yaml
index 32b4ed56..806738a4 100644
--- a/.github/workflows/test-setup-monitoring.yaml
+++ b/.github/workflows/test-setup-monitoring.yaml
@@ -63,4 +63,4 @@ jobs:
 
       - name: Collect diagnostics
         if: ${{ failure() }}
-        uses: chainguard-dev/actions/kind-diag@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+        uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/git-tag/action.yml b/git-tag/action.yml
index 07bc63be..84499965 100644
--- a/git-tag/action.yml
+++ b/git-tag/action.yml
@@ -77,7 +77,7 @@ runs:
         sudo mv semver /usr/local/bin/
 
     # Configure gitsign for signed commits
-    - uses: chainguard-dev/actions/setup-gitsign@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+    - uses: chainguard-dev/actions/setup-gitsign@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       if: ${{ inputs.use-gitsign == 'true' }}
 
     - name: Bump the version or used the forced version
diff --git a/gofmt/action.yaml b/gofmt/action.yaml
index 6bf10e49..ff87b0af 100644
--- a/gofmt/action.yaml
+++ b/gofmt/action.yaml
@@ -60,6 +60,6 @@ runs:
       done
 
   - name: Verify gofmt
-    uses: chainguard-dev/actions/nodiff@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+    uses: chainguard-dev/actions/nodiff@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
     with:
       fixup-command: "gofmt ${{ inputs.args }}"
diff --git a/goimports/action.yaml b/goimports/action.yaml
index fd713281..f4ab6c44 100644
--- a/goimports/action.yaml
+++ b/goimports/action.yaml
@@ -68,6 +68,6 @@ runs:
       done
 
   - name: Verify goimports
-    uses: chainguard-dev/actions/nodiff@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+    uses: chainguard-dev/actions/nodiff@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
     with:
       fixup-command: "goimports"
diff --git a/inky-build-pkg/action.yaml b/inky-build-pkg/action.yaml
index 7b3d5af3..2a346fd0 100644
--- a/inky-build-pkg/action.yaml
+++ b/inky-build-pkg/action.yaml
@@ -37,7 +37,7 @@ runs:
       shell: bash
       run: |
         mkdir -p "$GITHUB_WORKSPACE/${INPUTS_PACKAGE_NAME}"
-    - uses: chainguard-dev/actions/melange-build-pkg@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+    - uses: chainguard-dev/actions/melange-build-pkg@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         config: ${{ inputs.package-name }}.yaml
         archs: ${{ inputs.archs }}
diff --git a/melange-build/action.yaml b/melange-build/action.yaml
index be2eb81a..c2a02806 100644
--- a/melange-build/action.yaml
+++ b/melange-build/action.yaml
@@ -113,14 +113,14 @@ runs:
       shell: bash
       run: |
         echo "Warning: the --template flag has been removed from melange and will be ignored."
-    - uses: chainguard-dev/actions/setup-melange@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+    - uses: chainguard-dev/actions/setup-melange@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         version: ${{ inputs.version }}
-    - uses: chainguard-dev/actions/melange-keygen@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+    - uses: chainguard-dev/actions/melange-keygen@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       if: ${{ inputs.sign-with-temporary-key == 'true' }}
       with:
         signing-key-path: ${{ inputs.signing-key-path }}
-    - uses: chainguard-dev/actions/melange-build-pkg@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+    - uses: chainguard-dev/actions/melange-build-pkg@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         config: ${{ inputs.config }}
         multi-config: ${{ inputs.multi-config }}
diff --git a/release-notes/action.yml b/release-notes/action.yml
index 6cf2e923..5d954cc9 100644
--- a/release-notes/action.yml
+++ b/release-notes/action.yml
@@ -121,7 +121,7 @@ runs:
         fi
 
     # Configure signed commits
-    - uses: chainguard-dev/actions/setup-gitsign@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+    - uses: chainguard-dev/actions/setup-gitsign@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       if: ${{ steps.create_pr.outputs.create_pr == 'true' }}
 
     - name: Create Pull Request
diff --git a/wolfi-build-pkg/action.yaml b/wolfi-build-pkg/action.yaml
index 0a149898..3cf1cde1 100644
--- a/wolfi-build-pkg/action.yaml
+++ b/wolfi-build-pkg/action.yaml
@@ -43,7 +43,7 @@ runs:
   using: 'composite'
 
   steps:
-    - uses: chainguard-dev/actions/melange-build-pkg@9d631658f55713e5f63ca0cc21ee168f81301fd9 # v1.6.30
+    - uses: chainguard-dev/actions/melange-build-pkg@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         config: ${{ inputs.package-name }}.yaml
         archs: ${{ inputs.archs }}