diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index bb63b7c3..4e22f329 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -311,7 +311,7 @@ jobs:
                   twine check dist/*
 
             - name: "Sigstore sign package"
-              uses: sigstore/gh-action-sigstore-python@5b79a39c381910c090341a2c9b0bf022c8b387e1 # v3.4.0
+              uses: sigstore/gh-action-sigstore-python@790bc6befb9d733738f18d8f895854b453640ec9 # v3.5.0
               with:
                   inputs: |
                       ./dist/*.tar.gz