diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
index 821c289e..f3ab6cc6 100644
--- a/.github/workflows/image.yaml
+++ b/.github/workflows/image.yaml
@@ -172,7 +172,7 @@ jobs:
       - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4.2.2
 
       - name: Build and push image to single-region registry
-        uses: getsentry/action-build-and-push-images@dd9b907092cdd2dbc6c1a409f7290df1b391f6ee
+        uses: getsentry/action-build-and-push-images@3714f354c0bc912a95221f193c9643cdba966e34
         with:
           image_name: 'vroom'
           platforms: linux/amd64
@@ -184,9 +184,14 @@ jobs:
           google_ar_image_name: us-central1-docker.pkg.dev/sentryio/vroom/vroom
           google_workload_identity_provider: projects/868781662168/locations/global/workloadIdentityPools/prod-github/providers/github-oidc-pool
           google_service_account: gha-vroom-push@sac-prod-sa.iam.gserviceaccount.com
+          # The builder stage starts with `COPY . .`, so nothing from a previous
+          # commit's cache is reusable. Skip the GitHub Actions cache and hand
+          # this build's cache to the next three builds on the runner's disk.
+          cache_from: ''
+          cache_to: type=local,dest=${{ runner.temp }}/vroom-buildcache,mode=max
 
       - name: Build and push image to multi-region registry
-        uses: getsentry/action-build-and-push-images@dd9b907092cdd2dbc6c1a409f7290df1b391f6ee
+        uses: getsentry/action-build-and-push-images@3714f354c0bc912a95221f193c9643cdba966e34
         with:
           image_name: 'vroom'
           platforms: linux/amd64
@@ -198,9 +203,11 @@ jobs:
           google_ar_image_name: us-docker.pkg.dev/sentryio/vroom-mr/vroom
           google_workload_identity_provider: projects/868781662168/locations/global/workloadIdentityPools/prod-github/providers/github-oidc-pool
           google_service_account: gha-vroom-push@sac-prod-sa.iam.gserviceaccount.com
+          cache_from: type=local,src=${{ runner.temp }}/vroom-buildcache
+          cache_to: ''
 
       - name: Build and push distroless image to single-region registry
-        uses: getsentry/action-build-and-push-images@dd9b907092cdd2dbc6c1a409f7290df1b391f6ee
+        uses: getsentry/action-build-and-push-images@3714f354c0bc912a95221f193c9643cdba966e34
         with:
           image_name: 'vroom'
           platforms: linux/amd64
@@ -214,9 +221,11 @@ jobs:
           google_ar_image_name: us-central1-docker.pkg.dev/sentryio/vroom/vroom
           google_workload_identity_provider: projects/868781662168/locations/global/workloadIdentityPools/prod-github/providers/github-oidc-pool
           google_service_account: gha-vroom-push@sac-prod-sa.iam.gserviceaccount.com
+          cache_from: type=local,src=${{ runner.temp }}/vroom-buildcache
+          cache_to: ''
 
       - name: Build and push distroless image to multi-region registry
-        uses: getsentry/action-build-and-push-images@dd9b907092cdd2dbc6c1a409f7290df1b391f6ee
+        uses: getsentry/action-build-and-push-images@3714f354c0bc912a95221f193c9643cdba966e34
         with:
           image_name: 'vroom'
           platforms: linux/amd64
@@ -230,3 +239,5 @@ jobs:
           google_ar_image_name: us-docker.pkg.dev/sentryio/vroom-mr/vroom
           google_workload_identity_provider: projects/868781662168/locations/global/workloadIdentityPools/prod-github/providers/github-oidc-pool
           google_service_account: gha-vroom-push@sac-prod-sa.iam.gserviceaccount.com
+          cache_from: type=local,src=${{ runner.temp }}/vroom-buildcache
+          cache_to: ''