diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml
index 0216168..115b753 100644
--- a/.github/workflows/build-publish.yml
+++ b/.github/workflows/build-publish.yml
@@ -36,7 +36,7 @@ jobs:
 
       - id: short-sha
         if: ${{ github.event_name == 'pull_request_target' }}
-        uses: actions/github-script@v6.2.0
+        uses: actions/github-script@v6.3.3
         with:
           script: |
             const sha = context.payload.pull_request.head.sha.substr(0,7)