Bump actions/attest-build-provenance in the actions group (#984)

Author: dependabot[bot]

.github/workflows/build.yml

@@ -78,7 +78,7 @@ jobs:
       run: ./eng/common/cibuild.sh -configuration Release -prepareMachine
 
     - name: Attest artifacts
-      uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4
+      uses: actions/attest-build-provenance@c4fbc648846ca6f503a13a2281a5e7b98aa57202 # v2.0.1
       if: |
         runner.os == 'Windows' &&
         github.event.repository.fork == false &&