diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 2256a59..c461e0e 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -120,7 +120,7 @@ jobs:
 
       - name: Attach witness to release (tag pushes only)
         if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
+        uses: softprops/action-gh-release@8a0cd651e5b2365bd640854a3fa5dfc70e4875f3 # v3.0.4
         with:
           files: attestations/latest.json
           fail_on_unmatched_files: false