diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8134560..68f6981 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -534,7 +534,7 @@ jobs:
     # attested-delivery/.github main @ f0c5cba (2026-07-13) — includes
     # attested-delivery/.github#32's fix for the SBOM step's
     # upload-release-assets 403 on tagged releases
-    uses: attested-delivery/.github/.github/workflows/sign-and-attest.yml@f0c5cba531533a956ce0e4dfd744d398b1b13494
+    uses: attested-delivery/.github/.github/workflows/sign-and-attest.yml@78f1933ef020e3d94af848a191297d26e8dc8b4c
     with:
       image-name: ghcr.io/${{ github.repository }}
       image-digest: ${{ needs.docker.outputs.image-digest }}