diff --git a/.github/workflows/npm-publish-github-packages.yml b/.github/workflows/npm-publish-github-packages.yml
index a36f562..45d586d 100644
--- a/.github/workflows/npm-publish-github-packages.yml
+++ b/.github/workflows/npm-publish-github-packages.yml
@@ -215,7 +215,7 @@ jobs:
 
       - name: Attest publish tarball
         if: steps.package-check.outputs.exists == 'false'
-        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: ${{ github.workspace }}/${{ steps.pack.outputs.filename }}
 
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 73594d9..5e5132a 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -254,7 +254,7 @@ jobs:
 
       - name: Attest validated npm package
         if: steps.npm-check.outputs.exists == 'false'
-        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: ${{ steps.package.outputs.tarball }}