diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 9abf9d1..0470361 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -104,7 +104,7 @@ jobs:
         # against the sigstore community Fulcio instance.
         run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
       - name: Run Microsoft Security DevOps
-        uses: microsoft/security-devops-action@v1.6.0
+        uses: microsoft/security-devops-action@v1.12.0
         id: msdo
       - name: Set up Python
         uses: actions/setup-python@v4