diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
index 8965e28..1be774e 100644
--- a/.github/workflows/workflow.yaml
+++ b/.github/workflows/workflow.yaml
@@ -173,7 +173,7 @@ jobs:
         # Match the push condition above
         if: github.event_name != 'pull_request'
         # https://github.com/actions/attest-build-provenance
-        uses: actions/attest-build-provenance@173725a1209d09b31f9d30a3890cf2757ebbff0d # v1.1.2
+        uses: actions/attest-build-provenance@49df96e17e918a15956db358890b08e61c704919 # v1.2.0
         with:
           subject-name: ${{ env.CONTAINER_IMAGE }}
           subject-digest: ${{ steps.push.outputs.digest }}