diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 94f2d66..fe26caa 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -115,7 +115,7 @@ jobs:
           output: sbom.json
 
       - name: Attest
-        uses: actions/attest-sbom@bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b # v2.4.0
+        uses: actions/attest-sbom@4651f806c01d8637787e274ac3bdf724ef169f34 # v3.0.0
         id: attest-sbom
         with:
           subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}