diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 6018151..041bc9d 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -102,7 +102,7 @@ jobs:
           upload-artifact: false
           upload-release-assets: false
       - name: 📝 Attest build provenance and SBOM
-        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: "dist/*"
           sbom-path: yamlrocks.cdx.json