diff --git a/.github/workflows/auto-nightly.yml b/.github/workflows/auto-nightly.yml
index dd2a675..454e9b5 100644
--- a/.github/workflows/auto-nightly.yml
+++ b/.github/workflows/auto-nightly.yml
@@ -63,7 +63,7 @@ jobs:
           BUILD_TYPE='oss' '${{ github.workspace }}/build.sh'
       - name: "Attest build provenance"
         id: "attest"
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         timeout-minutes: 10
         if: "${{ vars.NIGHTLY_ATTESTATION == 'true' && github.run_attempt == '1' && steps.build.outputs.ZIP_IS_ALPHA == 'true' && steps.build.outputs.ZIP_BUILD_TYPE_SUPPORTED == 'true' }}"
         with:
diff --git a/.github/workflows/auto-release-from-tag.yml b/.github/workflows/auto-release-from-tag.yml
index 581f1c3..378b603 100644
--- a/.github/workflows/auto-release-from-tag.yml
+++ b/.github/workflows/auto-release-from-tag.yml
@@ -45,7 +45,7 @@ jobs:
           make clean buildotaoss
       - name: "Attest build provenance"
         id: "attest"
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         timeout-minutes: 10
         if: "${{ vars.ATTESTATION == 'true' && github.run_attempt == '1' && steps.build.outputs.ZIP_IS_ALPHA == 'false' && steps.build.outputs.ZIP_BUILD_TYPE_SUPPORTED == 'true' }}"
         with: