diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 622fb95..5e7525d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -97,7 +97,7 @@ jobs:
         run: tar -czf "astrotime-evidence-${TAG_NAME}.tgz" evidence
 
       - name: Attest evidence archive
-        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: astrotime-evidence-${{ github.ref_name }}.tgz