diff --git a/.github/workflows/github-release.yml b/.github/workflows/github-release.yml
index 24eaba0..ec09a8a 100644
--- a/.github/workflows/github-release.yml
+++ b/.github/workflows/github-release.yml
@@ -38,7 +38,7 @@ jobs:
           set -euo pipefail
           find "$ARTIFACT_PATH" -type f -print -quit | grep -q .
           find "$ARTIFACT_PATH" -type f -print0 | sort -z | xargs -0 sha256sum > SHA256SUMS
-      - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
+      - uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         with:
           subject-path: |
             ${{ inputs.artifact-path }}/**