diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 508734f..18bbb0d 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -181,7 +181,7 @@ jobs:
       # However all the context is the caller repo (like this workflow is inlined)
       # https://github.com/orgs/community/discussions/18602
       # https://github.com/orgs/community/discussions/63863
-      uses: bazel-contrib/publish-to-bcr@301f65edec7118166379e2ef5f29a05d2868a449
+      uses: bazel-contrib/publish-to-bcr@ff2c5e3fe8c3b83678df560bfc1cf4d0ba2eb3e1
       with:
         attest: true
         attestations-dest: attestations
@@ -264,7 +264,7 @@ jobs:
 
     - name: Create final entry
       id: create-final-entry
-      uses: bazel-contrib/publish-to-bcr@301f65edec7118166379e2ef5f29a05d2868a449
+      uses: bazel-contrib/publish-to-bcr@ff2c5e3fe8c3b83678df560bfc1cf4d0ba2eb3e1
       with:
         tag: ${{ inputs.tag_name }}
         module-version: ${{ env.VERSION }}