diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 39873ee..5197220 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -100,7 +100,7 @@ jobs:
           [ "$(wc -l < SHA256SUMS)" -eq 4 ]
           [ "$ACTUAL_CHECKSUMS" = "$EXPECTED_CHECKSUMS" ]
           sha256sum --check --strict SHA256SUMS
-      - uses: actions/attest-build-provenance@43d14bc2b83dec42d39ecae14e916627a18bb661
+      - uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a
         with:
           subject-path: release-bundle/*
       - name: Create or update the verified GitHub release