diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 29cfba6..bdf207d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -197,7 +197,7 @@ jobs:
           echo "Generated SBOM from dependency graph"
 
       - name: Attest SBOM
-        uses: actions/attest-sbom@115c3be05ff3974bcbd596578934b3f9ce39bf68 # v2.2.0
+        uses: actions/attest-sbom@4651f806c01d8637787e274ac3bdf724ef169f34 # v3.0.0
         with:
           subject-path: sbom.spdx.json
           sbom-path: sbom.spdx.json