diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4d01a8a..7e79fa6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -102,7 +102,7 @@ jobs:
         name: build
         path: build/output
 
-    - uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018  # v1.4.4
+    - uses: actions/attest-build-provenance@c4fbc648846ca6f503a13a2281a5e7b98aa57202  # v2.0.1
       with:
         subject-path: '${{ github.workspace }}/${{ env.ARTIFACTS }}'
 
@@ -143,7 +143,7 @@ jobs:
     - name: Create or update release for tag on github
       run: ./build.sh createreleaseongithub -s true --token ${{secrets.GITHUB_TOKEN}}
 
-    - uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018  # v1.4.4
+    - uses: actions/attest-build-provenance@c4fbc648846ca6f503a13a2281a5e7b98aa57202  # v2.0.1
       with:
         subject-path: '${{ github.workspace }}/${{ env.ARTIFACTS }}'