diff --git a/.github/workflows/test-yq.yml b/.github/workflows/test-yq.yml
index 941fdff2..f3108fb5 100644
--- a/.github/workflows/test-yq.yml
+++ b/.github/workflows/test-yq.yml
@@ -16,13 +16,13 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Get test
         id: get_value
-        uses: mikefarah/yq@2927a282833541e91cb3a9802209aa7b730f10aa # master
+        uses: mikefarah/yq@master
         with:
           cmd: yq '.test' examples/multiline-text.yaml
       - name: Multiline test
         run: echo "### It was [${{ steps.get_value.outputs.result }}]" >> $GITHUB_STEP_SUMMARY
       - name: Write inplace test
         id: lookupSdkVersion
-        uses: mikefarah/yq@2927a282833541e91cb3a9802209aa7b730f10aa # master
+        uses: mikefarah/yq@master
         with:
           cmd: yq -i '.b.c = 5' examples/sample.yaml
\ No newline at end of file
diff --git a/release_instructions.txt b/release_instructions.txt
index 6b2fdf9d..23ef7d4c 100644
--- a/release_instructions.txt
+++ b/release_instructions.txt
@@ -8,6 +8,10 @@
 - git push --tags
 - use github actions to publish docker and make github release
 - check github updated yq action in marketplace
+- update github-action/Dockerfile to pin the newly published docker image digest:
+    skopeo inspect docker://docker.io/mikefarah/yq:4 | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['Digest'])"
+  then update the FROM line in github-action/Dockerfile with the new digest:
+    FROM mikefarah/yq:4@sha256:<new-digest>
 
 
 - snapcraft