diff --git a/action.yaml b/action.yaml
index f2c581d74..f0baf9833 100644
--- a/action.yaml
+++ b/action.yaml
@@ -213,7 +213,7 @@ runs:
 
   - name: Upload Attestation
     if: ${{ inputs.upload_attestation == 'true' && steps.collect-reports.outputs.vsa_generated == 'true' }}
-    uses: actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 #3.0.0
+    uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 #4.2.2
     with:
       subject-path: ${{ inputs.subject_path }}
       predicate-type: https://slsa.dev/verification_summary/v1