diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml
index 552e82b..63d6eea 100644
--- a/.github/workflows/pypi-publish.yml
+++ b/.github/workflows/pypi-publish.yml
@@ -200,7 +200,7 @@ jobs:
           path: dist/
 
       - name: Sign artifacts with Sigstore
-        uses: sigstore/gh-action-sigstore-python@f7ad0af51a5648d09a20d00370f0a91c3bdf8f84 # v3.0.1
+        uses: sigstore/gh-action-sigstore-python@790bc6befb9d733738f18d8f895854b453640ec9 # v3.5.0
         with:
           inputs: dist/*.whl dist/*.tar.gz
           # Default is "true" and, on a release-triggered run, additionally