diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 775aece..a9af5d5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -92,13 +92,13 @@ jobs:
         env:
           ARTIFACTS: ${{ steps.goreleaser.outputs.artifacts }}
       - name: Publish Container Attestations
-        uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
+        uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
         with:
           subject-name: ${{ steps.image_metadata.outputs.name }}
           subject-digest: ${{ steps.image_metadata.outputs.digest }}
           push-to-registry: true
       - name: Publish Attestations
-        uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
+        uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
         with:
           subject-path: |
             dist/*.tar.gz