diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cc06555..87e2502 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,7 +45,7 @@ jobs:
         uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 #pin@v3.5.0
 
       - name: Install Oras
-        uses: oras-project/setup-oras@ee7dbe1144cb00080a89497f937dae78f85fce29 # v1.1.0
+        uses: oras-project/setup-oras@ca28077386065e263c03428f4ae0c09024817c93 # v1.2.0
 
       - name: Publish and Sign OCI Charts
         run: |