diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a20f79ed..afd2cccf 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -81,7 +81,7 @@ jobs:
           pnpm --filter @pulse/extension verify-manifest --expected-version "$EXPECTED_VERSION"
 
       - name: Verify successful seal-candidate run provenance
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3
         env:
           EVIDENCE_RUN_ID: ${{ inputs.evidence_run_id }}
           SOURCE_COMMIT: ${{ inputs.source_commit }}