diff --git a/.github/workflows/dotnet.yaml b/.github/workflows/dotnet.yaml
index c762d7f..98c6991 100644
--- a/.github/workflows/dotnet.yaml
+++ b/.github/workflows/dotnet.yaml
@@ -199,7 +199,7 @@ jobs:
           name: nuget-package
           path: packed
       - name: Attest Build Provenance
-        uses: actions/attest-build-provenance@897ed5eab6ed058a474202017ada7f40bfa52940 # v1.0.0
+        uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
         with:
           subject-path: "packed/WoofWare.DotnetRuntimeLocator.*.nupkg"
 
@@ -241,7 +241,7 @@ jobs:
         run: 'bash ./.github/workflows/assert-contents.sh'
       - name: Attest Build Provenance
         if: steps.publish-success.outputs.result == 'published'
-        uses: actions/attest-build-provenance@897ed5eab6ed058a474202017ada7f40bfa52940 # v1.0.0
+        uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
         with:
           subject-path: "from-nuget.nupkg"