diff --git a/.github/workflows/plumber.yml b/.github/workflows/plumber.yml
index 7dcb3fb..1d2e867 100644
--- a/.github/workflows/plumber.yml
+++ b/.github/workflows/plumber.yml
@@ -20,7 +20,7 @@ jobs:
           sparse-checkout: .github
           persist-credentials: false
       - name: Run Plumber
-        uses: getplumber/plumber@cd1ecdf0a0053f9b0cc123976bb369772d876af3 # v0.7.4
+        uses: getplumber/plumber@ace0b096144d1f7af8290f4d63349a5a0cd5c889 # v0.7.14
         with:
           verify-attestation: true
           config-file: .github/plumber/plumber.yaml
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 5353cba..ea332ec 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
       - name: Run Plumber (advisory)
         continue-on-error: true
-        uses: getplumber/plumber@cd1ecdf0a0053f9b0cc123976bb369772d876af3 # v0.7.4
+        uses: getplumber/plumber@ace0b096144d1f7af8290f4d63349a5a0cd5c889 # v0.7.14
         with:
           verify-attestation: true
           config-file: .github/plumber/plumber.yaml