diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index 511cebe..50db2bf 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -123,7 +123,7 @@ jobs:
 
       - name: 🛡️ Attest build provenance (publish only)
         if: inputs.publish
-        uses: actions/attest-build-provenance@bd77c077858b8d561b7a36cbe48ef4cc642ca39d # v2.2.2
+        uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
         with:
           subject-path: |
             src-tauri/gen/android/app/build/outputs/apk/universal/release/mdns-browser_${{ steps.get-version.outputs.current-version }}.apk
diff --git a/.github/workflows/desktop-tauri.yml b/.github/workflows/desktop-tauri.yml
index e6f77d9..381ea04 100644
--- a/.github/workflows/desktop-tauri.yml
+++ b/.github/workflows/desktop-tauri.yml
@@ -160,7 +160,7 @@ jobs:
 
       - name: 🛡️ Attest build provenance (publish release only)
         if: inputs.tagName != ''
-        uses: actions/attest-build-provenance@bd77c077858b8d561b7a36cbe48ef4cc642ca39d # v2.2.2
+        uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
         with:
           subject-path: |
             target/release/bundle/nsis/*