diff --git a/.github/actions/docker-pull/Dockerfile b/.github/actions/docker-pull/Dockerfile
new file mode 100644
index 0000000..271176e
--- /dev/null
+++ b/.github/actions/docker-pull/Dockerfile
@@ -0,0 +1,3 @@
+FROM docker:29.3@sha256:4d90f1f6c400315c2dba96d3ec93c01e64198395cbba04f79d12adce4f737029
+
+ENTRYPOINT ["docker"]
diff --git a/.github/actions/docker-pull/action.yml b/.github/actions/docker-pull/action.yml
new file mode 100644
index 0000000..77ea1a5
--- /dev/null
+++ b/.github/actions/docker-pull/action.yml
@@ -0,0 +1,15 @@
+name: Pull Docker image
+
+description: Pull an image from a Docker container action
+
+inputs:
+  image:
+    description: Image reference to pull
+    required: true
+
+runs:
+  using: docker
+  image: Dockerfile
+  args:
+    - pull
+    - ${{ inputs.image }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 16369e0..2cc6693 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -106,11 +106,10 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       -
-        name: DinD
-        uses: docker://docker:29.3@sha256:4d90f1f6c400315c2dba96d3ec93c01e64198395cbba04f79d12adce4f737029
+        name: Pull test image from Docker CLI container action
+        uses: ./.github/actions/docker-pull
         with:
-          entrypoint: docker
-          args: pull ${{ env.GHCR_TEST_IMAGE }}
+          image: ${{ env.GHCR_TEST_IMAGE }}
       -
         name: Pull test image
         run: |