diff --git a/.github/workflows/provenance.yml b/.github/workflows/provenance.yml
index 64b5406..c4796de 100644
--- a/.github/workflows/provenance.yml
+++ b/.github/workflows/provenance.yml
@@ -124,7 +124,7 @@ jobs:
           hashes=$(sha256sum target/release/springtaled target/release/springtale-cli | base64 -w0)
           echo "hashes=$hashes" >> "$GITHUB_OUTPUT"
       - name: Attest reproducible build
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: |
             target/release/springtaled
@@ -195,7 +195,7 @@ jobs:
         with:
           name: release-binaries
           path: dist/
-      - uses: actions/attest-build-provenance@v2
+      - uses: actions/attest-build-provenance@v4
         with:
           subject-path: |
             dist/springtaled