diff --git a/action.yaml b/action.yaml
index 418f37705..4c54edeb9 100644
--- a/action.yaml
+++ b/action.yaml
@@ -105,7 +105,7 @@ runs:
 
   - name: Upload Attestation
     if: ${{ inputs.upload_attestation == 'true' && steps.run-macaron-policy-verification.outputs.vsa_report != 'VSA Not Generated.' }}
-    uses: actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 #3.0.0
+    uses: actions/attest@c32b4b8b198b65d0bd9d63490e847ff7b53989d4 #4.0.0
     with:
       subject-path: ${{ inputs.subject_path }}
       predicate-type: https://slsa.dev/verification_summary/v1