diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index ec73fcf..1b2adde 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -25,7 +25,7 @@ jobs:
       - name: Build package
         run: uv build
       - name: Attest package provenance
-        uses: actions/attest-build-provenance@v4
+        uses: actions/attest-build-provenance@v4.1.0
         with:
           subject-path: "dist/*"
       - name: Publish package