diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 5eeef11..bd05f63 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -310,7 +310,7 @@ jobs:
           } >> "${GITHUB_OUTPUT}"
 
       - name: Attest OCI image
-        uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
+        uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
         with:
           subject-name: ${{ steps.oci.outputs.repository }}
           subject-digest: ${{ steps.publish_oci.outputs.digest }}