diff --git a/.github/workflows/at_client_sdk.yaml b/.github/workflows/at_client_sdk.yaml
index fa6ce4749..61cf63ff0 100644
--- a/.github/workflows/at_client_sdk.yaml
+++ b/.github/workflows/at_client_sdk.yaml
@@ -169,7 +169,7 @@ jobs:
       - name: update image on cicd VMs
         # Needs a secret, so don't run for Dependabot PRs
         if: ${{ github.actor != 'dependabot[bot]' }}
-        uses: appleboy/ssh-action@2451745138b602d3e100a6def50c8e4e39591d4c # v1.0.2
+        uses: appleboy/ssh-action@029f5b4aeeeb58fdfe1410a5d17f967dacf36262 # v1.0.3
         with:
           host: "cicd1.atsign.wtf,cicd2.atsign.wtf"
           username: ubuntu