diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 38d059f..ffcb10e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -50,7 +50,7 @@ jobs:
       - name: Sign build artifacts
         id: sign
         if: ${{ (github.event.inputs.upload || github.ref_type == 'tag') }}
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v3
         with:
           subject-path: "dist/*"