diff --git a/.github/workflows/build-image.yml b/.github/workflows/build-image.yml
index 91628b9..455a8ef 100644
--- a/.github/workflows/build-image.yml
+++ b/.github/workflows/build-image.yml
@@ -291,7 +291,7 @@ jobs:
 
       - name: Attest build provenance (SLSA) for produced images
         if: ${{ inputs.skip_heavy_build == false && hashFiles('out/*.zip', 'out/*.7z', 'out/*.iso') != '' }}
-        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0
+        uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
         with:
           subject-path: |
             out/*.zip