diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8ce28273..8c4c9f01 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -274,7 +274,7 @@ jobs:
 
       - name: Attest Native Provenance
         id: provenance
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: |
             release-assets/${{ env.RELEASE_ARCHIVE }}
@@ -283,7 +283,7 @@ jobs:
 
       - name: Attest Native SBOM
         id: sbom-attestation
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: release-assets/${{ env.RELEASE_ARCHIVE }}
           sbom-path: release-assets/${{ env.RELEASE_SBOM }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3dc88512..7f6e1cf4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -295,7 +295,7 @@ jobs:
 
       - name: Attest Release Provenance
         id: provenance
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: |
             release-assets/${{ env.RELEASE_ARCHIVE }}
@@ -304,7 +304,7 @@ jobs:
 
       - name: Attest Release SBOM
         id: sbom-attestation
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: release-assets/${{ env.RELEASE_ARCHIVE }}
           sbom-path: release-assets/${{ env.RELEASE_SBOM }}