diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 995d5fd..ccb6f3e 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -26,7 +26,7 @@ jobs:
           bazel run //:bundle_release -- bin/
       - name: smoke test
         run: ./bin/gawk_linux_amd64 --help
-      - uses: actions/attest-build-provenance@v2
+      - uses: actions/attest-build-provenance@v3
         with:
           subject-path: 'bin/gawk_*'
       - uses: actions/upload-artifact@v4