diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a4573819e6..caa45da949 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -605,7 +605,7 @@ jobs:
           test -s release-files/sha256sums.txt.asc
 
       - name: Attest release artifacts
-        uses: actions/attest-build-provenance@96b4a1ef7235a096b17240c259729fdd70c83d45 # v2
+        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
         with:
           subject-path: |
             release-files/*.tar.gz
@@ -999,7 +999,7 @@ jobs:
           fi
 
       - name: Attest NuGet package artifacts
-        uses: actions/attest-build-provenance@96b4a1ef7235a096b17240c259729fdd70c83d45 # v2
+        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
         with:
           subject-path: |
             nupkg/*.nupkg