diff --git a/.github/workflows/docker-riverproui.yaml b/.github/workflows/docker-riverproui.yaml
index 5885c955..fdf55633 100644
--- a/.github/workflows/docker-riverproui.yaml
+++ b/.github/workflows/docker-riverproui.yaml
@@ -302,7 +302,7 @@ jobs:
 
       - name: Generate build provenance attestation (not pushed)
         id: attest
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4.1.0
         with:
           push-to-registry: false
           subject-digest: ${{ steps.manifest_digest.outputs.digest }}
diff --git a/.github/workflows/docker-riverui.yaml b/.github/workflows/docker-riverui.yaml
index b85cb79f..cf2215a3 100644
--- a/.github/workflows/docker-riverui.yaml
+++ b/.github/workflows/docker-riverui.yaml
@@ -88,7 +88,7 @@ jobs:
           outputs: type=image,name=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true,annotation-index.org.opencontainers.image.description=River UI
 
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4.1.0
         with:
           push-to-registry: true
           subject-digest: ${{ steps.build.outputs.digest }}