diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ae5ecb3b..cfa8de45 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -349,7 +349,7 @@ jobs:
           wheel-venv/bin/mesa-v4-admin --help
       - name: Attest tagged package artifacts
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.0.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v2.0.0
         with:
           subject-path: |
             dist/a/*.whl