diff --git a/.github/workflows/pack-build-check.yaml b/.github/workflows/pack-build-check.yaml
index beb66cf..df60379 100644
--- a/.github/workflows/pack-build-check.yaml
+++ b/.github/workflows/pack-build-check.yaml
@@ -20,15 +20,16 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1
         with:
+          toolchain: stable
           components: rustfmt, clippy
 
       - name: Cache cargo registry
-        uses: actions/cache@v4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: |
             ~/.cargo/registry
@@ -53,7 +54,3 @@ jobs:
       - name: Run tests
         working-directory: pack
         run: cargo test --all-features
-
-      - name: Run tests
-        working-directory: pack
-        run: cargo test --all-features
diff --git a/.github/workflows/pack-release.yaml b/.github/workflows/pack-release.yaml
index bf27a6a..6255cc6 100644
--- a/.github/workflows/pack-release.yaml
+++ b/.github/workflows/pack-release.yaml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Validate version format
         run: |
@@ -37,7 +37,7 @@ jobs:
           fi
 
       - name: Create tag and GitHub release
-        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
         with:
           tag_name: pack-v${{ inputs.version }}
           name: "PACK v${{ inputs.version }}"
@@ -53,7 +53,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
@@ -78,10 +78,12 @@ jobs:
             type=raw,value=latest
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: ./pack
           platforms: linux/amd64,linux/arm64
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
diff --git a/pack/Dockerfile b/pack/Dockerfile
index 1c19d74..1fc7164 100644
--- a/pack/Dockerfile
+++ b/pack/Dockerfile
@@ -12,7 +12,7 @@ RUN rm src/main.rs
 COPY src ./src
 RUN touch src/main.rs && cargo build --release
 
-FROM registry.suse.com/bci/bci-micro:latest
+FROM registry.suse.com/bci/bci-base:latest
 
 COPY --from=builder /app/target/release/pack /usr/local/bin/pack