diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 469499798..db1d9c862 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -364,7 +364,7 @@ jobs:
       - name: Get team registry token
         id: import-secrets
         if: github.event_name == 'push'
-        uses: hashicorp/vault-action@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b # v3.4.0
+        uses: hashicorp/vault-action@892a26828f195e65540a40b4768ae4571f51ebfc # v4.0.0
         with:
           url: https://vault.infra.ci.i.element.dev
           role: ${{ steps.vault-jwt-role.outputs.role_name }}
@@ -499,7 +499,7 @@ jobs:
       - name: Get team registry token
         id: import-secrets
         if: github.event_name == 'push'
-        uses: hashicorp/vault-action@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b # v3.4.0
+        uses: hashicorp/vault-action@892a26828f195e65540a40b4768ae4571f51ebfc # v4.0.0
         with:
           url: https://vault.infra.ci.i.element.dev
           role: ${{ steps.vault-jwt-role.outputs.role_name }}