diff --git a/.github/workflows/release-packaging.yaml b/.github/workflows/release-packaging.yaml
index a2e4826..2b86c34 100644
--- a/.github/workflows/release-packaging.yaml
+++ b/.github/workflows/release-packaging.yaml
@@ -146,7 +146,7 @@ jobs:
 
       # Attestations (GitHub Native Security)
       - name: Attest SBOMs
-        uses: actions/attest-sbom@07e74fc4e78d1aad915e867f9a094073a9f71527 # v4.0.0
+        uses: actions/attest-sbom@c604332985a26aa8cf1bdc465b92731239ec6b9e # v4.1.0
         with:
           sbom-path: 'sbom-*.spdx.json'