diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bc0a98e..acc3722 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -259,7 +259,7 @@ jobs:
           test "$(find candidate -maxdepth 1 -type f -name '*.zip' | wc -l | tr -d ' ')" = 1
           (cd candidate && shasum -a 256 -c SHA256SUMS)
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a
+        uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8
         with:
           subject-path: |
             candidate/*.tar.gz