diff --git a/.github/workflows/build-game-bridge.yaml b/.github/workflows/build-game-bridge.yaml
index 024a250626..2821b468be 100644
--- a/.github/workflows/build-game-bridge.yaml
+++ b/.github/workflows/build-game-bridge.yaml
@@ -101,7 +101,7 @@ jobs:
         run: pnpm nx run @imtbl/game-bridge:build --skip-nx-cache
 
       - name: Attest Game Bridge Build
-        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # pin@v4.1.0
+        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # pin@v4.2.0
         with:
           subject-path: |
             ./packages/game-bridge/dist/unity/index.html
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index d83bdf3d69..e04557082e 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -103,7 +103,7 @@ jobs:
       # ! Do NOT remove any of these attestation subject paths - this will cause a Sev 0 incident !
 
       - name: Generate SDK Package Attestations
-        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # pin@v4.1.0
+        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # pin@v4.2.0
         with:
           subject-path: ./imtbl-*.tgz