diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9106e2b..87f39ad 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -55,7 +55,7 @@ jobs:
           APPLE_APP_PASSWORD: ${{ secrets.APPLE_APP_PASSWORD }}
         run: node scripts/release/build-release-mac.js --build-number "${{ steps.version.outputs.build }}" --arch "${{ matrix.arch }}"
       - name: Attest build provenance
-        uses: actions/attest@v4
+        uses: actions/attest@v4.2.0
         with:
           subject-path: |
             dist/Slick-*.zip
@@ -97,7 +97,7 @@ jobs:
       - name: Build release artifact
         run: node scripts/release/build-release-win.js --build-number "${{ steps.version.outputs.build }}" --arch "${{ matrix.arch }}"
       - name: Attest build provenance
-        uses: actions/attest@v4
+        uses: actions/attest@v4.2.0
         with:
           subject-path: dist/Slick-*-win32-*.zip
       - name: Upload artifacts
@@ -135,7 +135,7 @@ jobs:
       - name: Build release artifact
         run: node scripts/release/build-release-linux.js --build-number "${{ steps.version.outputs.build }}" --arch "${{ matrix.arch }}"
       - name: Attest build provenance
-        uses: actions/attest@v4
+        uses: actions/attest@v4.2.0
         with:
           subject-path: dist/Slick-*-linux-*.tar.gz
       - name: Upload artifacts