diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index b47accce..8c6762f9 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -96,7 +96,7 @@ jobs:
         run: strip --strip-all target/${{ matrix.target }}/release/pdu
 
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: target/${{ matrix.target }}/release/pdu
 
@@ -142,7 +142,7 @@ jobs:
         run: strip target/${{ matrix.target }}/release/pdu
 
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: target/${{ matrix.target }}/release/pdu
 
@@ -187,7 +187,7 @@ jobs:
         run: cargo build --target ${{ matrix.target }} --release --all-features
 
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: target/${{ matrix.target }}/release/pdu.exe
 
@@ -257,7 +257,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: |
             ./exports/completion.bash
@@ -415,7 +415,7 @@ jobs:
         run: ./ci/github-actions/create-checksums.sh
 
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: |
             ./sha1sum.txt
@@ -672,7 +672,7 @@ jobs:
         run: tar czf tmp.benchmark-reports.tar.gz tmp.benchmark-report.*
 
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: ./tmp.benchmark-reports.tar.gz