diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index 58eaf5a..23e31f5 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -49,7 +49,7 @@ jobs:
             dist/*
 
       # Attest the binaries
-      - uses: actions/attest-build-provenance@173725a1209d09b31f9d30a3890cf2757ebbff0d # v1.1.2
+      - uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3
         if: "!startsWith(github.ref, 'refs/pull/')" # id-token cannot be given in `pull_request:` target
         with:
           subject-path: |-