diff --git a/.github/workflows/build-game-bridge.yaml b/.github/workflows/build-game-bridge.yaml
index 024a250626..366c3c4950 100644
--- a/.github/workflows/build-game-bridge.yaml
+++ b/.github/workflows/build-game-bridge.yaml
@@ -101,7 +101,7 @@ jobs:
         run: pnpm nx run @imtbl/game-bridge:build --skip-nx-cache
 
       - name: Attest Game Bridge Build
-        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # pin@v4.1.0
+        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # pin@v4.2.1
         with:
           subject-path: |
             ./packages/game-bridge/dist/unity/index.html
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index d83bdf3d69..7aa17e0bdf 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -103,7 +103,7 @@ jobs:
       # ! Do NOT remove any of these attestation subject paths - this will cause a Sev 0 incident !
 
       - name: Generate SDK Package Attestations
-        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # pin@v4.1.0
+        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # pin@v4.2.1
         with:
           subject-path: ./imtbl-*.tgz