diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e1e7f9fde5be..d8d97ec4ef7f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -24,7 +24,7 @@ on:
       - 'frontend/dockerfile/docs/**'
 
 env:
-  REPO_SLUG_ORIGIN: "moby/buildkit:master@sha256:49f8a220b0b7a217b15d4857df9ba42f22d01341dc77a42432c6bc3a66e33b25"
+  REPO_SLUG_ORIGIN: "moby/buildkit:v0.11.0-rc4"
   REPO_SLUG_TARGET: "moby/buildkit"
   DF_REPO_SLUG_TARGET: "docker/dockerfile-upstream"
   PLATFORMS: "linux/amd64,linux/arm/v7,linux/arm64,linux/s390x,linux/ppc64le,linux/riscv64"
@@ -32,7 +32,7 @@ env:
   CACHE_GHA_SCOPE_BINARIES: "binaries"
   CACHE_GHA_SCOPE_CROSS: "cross"
   TESTFLAGS: "-v --parallel=6 --timeout=30m"
-  BUILDX_VERSION: "v0.10.0-rc1"  # leave empty to use the one available on GitHub virtual environment
+  BUILDX_VERSION: "v0.10.0-rc3"  # leave empty to use the one available on GitHub virtual environment
   GO_VERSION: "1.19"
 
 jobs:
diff --git a/docs/attestations/slsa-definitions.md b/docs/attestations/slsa-definitions.md
index 76f25d9847b9..46e198efc1b2 100644
--- a/docs/attestations/slsa-definitions.md
+++ b/docs/attestations/slsa-definitions.md
@@ -43,7 +43,7 @@ Describes the config that initialized the build.
 ```json
     "invocation": {
       "configSource": {
-        "uri": "https://github.com/moby/buildkit.git#refs/tags/v0.11.0-rc3",
+        "uri": "https://github.com/moby/buildkit.git#refs/tags/v0.11.0",
         "digest": {
           "sha1": "4b220de5058abfd01ff619c9d2ff6b09a049bea0"
         },