diff --git a/.github/workflows/slsa.yml b/.github/workflows/slsa.yml
index 6ade306..7e8fba5 100644
--- a/.github/workflows/slsa.yml
+++ b/.github/workflows/slsa.yml
@@ -69,7 +69,7 @@ jobs:
           name: ${{ env.REPOSITORY_NAME }}.sha256
 
       - name: Upload asset
-        uses: softprops/action-gh-release@fb2d03176f42a1f0dd433ca263f314051d3edd44 # v2.0.7
+        uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2.0.8
         with:
           files: |
             ${{ env.REPOSITORY_NAME }}.sha256