diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 7ed1f8b..3defa08 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -35,7 +35,7 @@ jobs:
           token: ${{ secrets.OSS_GITHUB_TOKEN }}
 
       - name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@v3
+        uses: crazy-max/ghaction-import-gpg@v4.2.0
         with:
           git-user-signingkey: true
           git-commit-gpgsign: true
@@ -67,7 +67,7 @@ jobs:
 
       - name: Import GPG key
         id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@v3
+        uses: crazy-max/ghaction-import-gpg@v4.2.0
         if: needs.context.outputs.shouldPublish == 'true'
         with:
           git-user-signingkey: true
@@ -176,7 +176,7 @@ jobs:
 
       - name: Import GPG key
         id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@v3
+        uses: crazy-max/ghaction-import-gpg@v4.2.0
         with:
           git-user-signingkey: true
           gpg-private-key: ${{ secrets.CI_GPG_PRIVATE_KEY }}