diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e0e68ca..f26559e 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -16,7 +16,7 @@ jobs:
       - name: Build release
         run: cargo build --release --locked
       - name: Upload binaries to release
-        uses: svenstaro/upload-release-action@7319e4733ec7a184d739a6f412c40ffc339b69c7 # ratchet:svenstaro/upload-release-action@v2
+        uses: svenstaro/upload-release-action@81c65b7cd4de9b2570615ce3aad67a41de5b1a13 # ratchet:svenstaro/upload-release-action@v2
         with:
           repo_token: ${{ secrets.RELEASE_TOKEN }}
           file: target/release/github-sbom-generator
@@ -30,7 +30,7 @@ jobs:
           subcommand: files
           arguments: --artifact-path target/release/github-sbom-generator --output-path provenance.json
       - name: Upload provenance to release
-        uses: svenstaro/upload-release-action@7319e4733ec7a184d739a6f412c40ffc339b69c7 # ratchet:svenstaro/upload-release-action@v2
+        uses: svenstaro/upload-release-action@81c65b7cd4de9b2570615ce3aad67a41de5b1a13 # ratchet:svenstaro/upload-release-action@v2
         with:
           repo_token: ${{ secrets.RELEASE_TOKEN }}
           file: provenance.json