diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 525a38b..f11e77f 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -204,7 +204,7 @@ jobs:
       run: sha256sum ${{ matrix.asset_name }} > ${{ matrix.asset_name }}.sha256
 
     - name: Attest build provenance
-      uses: actions/attest-build-provenance@v3
+      uses: actions/attest-build-provenance@v4
       with:
         subject-path: ${{ matrix.asset_name }}
 
@@ -297,7 +297,7 @@ jobs:
         build-args: VERSION=${{ github.ref_name }}
 
     - name: Attest image provenance
-      uses: actions/attest-build-provenance@v3
+      uses: actions/attest-build-provenance@v4
       with:
         subject-name: ${{ steps.image.outputs.name }}
         subject-digest: ${{ steps.push.outputs.digest }}