diff --git a/.github/workflows/release-image.yml b/.github/workflows/release-image.yml
index 16bb82c..e1fee70 100644
--- a/.github/workflows/release-image.yml
+++ b/.github/workflows/release-image.yml
@@ -175,7 +175,7 @@ jobs:
             "${{ steps.release_meta.outputs.image_ref }}@${{ steps.image_digest.outputs.digest }}"
 
       - name: Emit SLSA provenance
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-name: ${{ steps.release_meta.outputs.image_repo }}
           subject-digest: ${{ steps.image_digest.outputs.digest }}
diff --git a/.github/workflows/rg-release.yml b/.github/workflows/rg-release.yml
index c6f88dd..d2d40a5 100644
--- a/.github/workflows/rg-release.yml
+++ b/.github/workflows/rg-release.yml
@@ -71,7 +71,7 @@ jobs:
           fi
       - uses: sigstore/cosign-installer@v4.1.2
       - run: cosign sign --yes ${{ inputs.image-ref }}@${{ steps.build.outputs.digest }}
-      - uses: actions/attest-build-provenance@v3
+      - uses: actions/attest-build-provenance@v4
         with:
           subject-name: ${{ inputs.image-ref }}
           subject-digest: ${{ steps.build.outputs.digest }}