diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 015e099..a6e3c50 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -470,7 +470,7 @@ jobs:
           wheel-venv/bin/mesa-v4-admin --help
       - name: Attest tagged package artifacts
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.0.0
+        uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v2.0.0
         with:
           subject-path: |
             dist/a/*.whl