diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml
index 96d191ff2d..3a9a7e516c 100644
--- a/.github/workflows/canary.yml
+++ b/.github/workflows/canary.yml
@@ -660,7 +660,7 @@ jobs:
 
       - name: Azure login for update signing.
         if: needs.version.outputs.publish == 'true'
-        uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2
+        uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -1055,7 +1055,7 @@ jobs:
 
       - name: Azure login for update signing.
         if: needs.version.outputs.publish == 'true'
-        uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2
+        uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -1331,7 +1331,7 @@ jobs:
 
       - name: Azure login for update signing.
         if: needs.version.outputs.publish == 'true'
-        uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2
+        uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}