diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 22496c14..19521a99 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -484,7 +484,7 @@ jobs:
           retention-days: 1
 
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@b3e506e8c389afc651c5bacf2b8f2a1ea0557215 # v4.1.0
+        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
         with:
           subject-path: |
             tfplan2md_${{ needs.release.outputs.version }}_${{ matrix.platform }}.${{ matrix.archive_ext }}