diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 18de8801..57c2861a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
     - name: Package
       run: npm pack --pack-destination pkg
     - id: attest
-      uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
+      uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
       with:
         subject-path: pkg/*
     - name: Copy attestation bundle