diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 027e2ee..100d878 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -156,7 +156,7 @@ jobs:
           sha256sum RELEASE-METADATA.json infra-*.tar.gz infra-*.spdx.json > SHA256SUMS
 
       - name: Attest release assets
-        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
+        uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
         with:
           subject-path: release/*