diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b6cdd95..c0c2fdc 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -22,7 +22,7 @@ jobs:
         with:
           token: ${{secrets.BOT_TOKEN}}
           persist-credentials: true # need creds for subsequent git operations
-      - uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
+      - uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7.0.0
         with:
           gpg_private_key: ${{secrets.BOT_GPG_SIGN_KEY}}
           git_user_signingkey: true