diff --git a/.github/workflows/docker-riverproui.yaml b/.github/workflows/docker-riverproui.yaml
index a7d75f4a..2e3a0fcd 100644
--- a/.github/workflows/docker-riverproui.yaml
+++ b/.github/workflows/docker-riverproui.yaml
@@ -302,7 +302,7 @@ jobs:
 
       - name: Generate build provenance attestation (not pushed)
         id: attest
-        uses: actions/attest-build-provenance@v4.1.1
+        uses: actions/attest-build-provenance@v4.2.2
         with:
           push-to-registry: false
           subject-digest: ${{ steps.manifest_digest.outputs.digest }}
diff --git a/.github/workflows/docker-riverui.yaml b/.github/workflows/docker-riverui.yaml
index d021cae0..ad241e27 100644
--- a/.github/workflows/docker-riverui.yaml
+++ b/.github/workflows/docker-riverui.yaml
@@ -88,7 +88,7 @@ jobs:
           outputs: type=image,name=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true,annotation-index.org.opencontainers.image.description=River UI
 
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v4.1.1
+        uses: actions/attest-build-provenance@v4.2.2
         with:
           push-to-registry: true
           subject-digest: ${{ steps.build.outputs.digest }}