diff --git a/.github/workflows/candidate-dossier.yml b/.github/workflows/candidate-dossier.yml
index 9b10140..0175150 100644
--- a/.github/workflows/candidate-dossier.yml
+++ b/.github/workflows/candidate-dossier.yml
@@ -172,7 +172,7 @@ jobs:
           create-storage-record: false
 
       - name: Attest workspace SBOM to the aggregate dossier subject
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
+        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
         with:
           subject-checksums: candidate-held/aggregate-sbom-subject.sha256
           sbom-path: candidate-held/candidate-dossier/products/supply-chain/sbom.cdx.json