diff --git a/packages/attest/package.json b/packages/attest/package.json
index 22f01f4d7b..4b9d9165d1 100644
--- a/packages/attest/package.json
+++ b/packages/attest/package.json
@@ -48,7 +48,7 @@
     "@octokit/plugin-retry": "^6.0.1",
     "@sigstore/bundle": "^2.3.2",
     "@sigstore/sign": "^2.3.2",
-    "jose": "^5.2.3"
+    "jose": "^6.0.11"
   },
   "overrides": {
     "@octokit/plugin-retry": {