diff --git a/.github/workflows/release-packaging.yaml b/.github/workflows/release-packaging.yaml
index c5dc3a5..944667a 100644
--- a/.github/workflows/release-packaging.yaml
+++ b/.github/workflows/release-packaging.yaml
@@ -142,7 +142,7 @@ jobs:
 
       # Attestations (GitHub Native Security)
       - name: Attest SBOMs
-        uses: actions/attest-sbom@4651f806c01d8637787e274ac3bdf724ef169f34 # v3.0.0
+        uses: actions/attest-sbom@c604332985a26aa8cf1bdc465b92731239ec6b9e # v4.1.0
         with:
           sbom-path: 'sbom-*.spdx.json'