diff --git a/packages/attest/package.json b/packages/attest/package.json
index cf8e32af50..9e617ec667 100644
--- a/packages/attest/package.json
+++ b/packages/attest/package.json
@@ -47,7 +47,7 @@
     "@actions/http-client": "^2.2.1",
     "@octokit/plugin-retry": "^6.0.1",
     "@sigstore/bundle": "^2.3.2",
-    "@sigstore/sign": "^2.3.2",
+    "@sigstore/sign": "^3.0.0",
     "jose": "^5.2.3"
   },
   "overrides": {