diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9e105be..bcf5cf0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -197,7 +197,7 @@ jobs:
         run: RELEASE_ARTIFACT_VERIFY_MODE=local make release-artifact-verify
 
       - name: Upload evidence and assets to draft release
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # softprops/action-gh-release v3.0.0
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # softprops/action-gh-release v3.0.2
         with:
           draft: true
           prerelease: ${{ steps.release_kind.outputs.prerelease }}