diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 128c303c7d..2d826589ad 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -277,7 +277,7 @@ jobs:
     # Generate SBOM attestation for DEB package (actions/attest with sbom-path replaces deprecated actions/attest-sbom)
     - name: Generate SBOM attestation for deb package
       id: attestsbom_deb
-      uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
+      uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
       with:
         subject-path: 'cia-dist-deb/target/cia-dist-deb-${{ github.event.inputs.release }}.all.deb'
         sbom-path: 'cia-dist-deb/target/cia-dist-deb-${{ github.event.inputs.release }}.all.deb.spdx.json'
@@ -298,7 +298,7 @@ jobs:
     # Generate SBOM attestation for WAR (actions/attest with sbom-path replaces deprecated actions/attest-sbom)
     - name: Generate SBOM attestation for WAR
       id: attestsbom_war
-      uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
+      uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
       with:
         subject-path: 'citizen-intelligence-agency/target/citizen-intelligence-agency-${{ github.event.inputs.release }}.war'
         sbom-path: 'citizen-intelligence-agency/target/citizen-intelligence-agency-${{ github.event.inputs.release }}.war.spdx.json'