diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index caefc0b..0f9ff2b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -109,9 +109,15 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: reqstool/.github/.github/actions/publish-to-pypi@b10b898cd5a1d552a578dbe4f170f84fb8f98b6c # main 2026-08-23
+      - uses: reqstool/.github/.github/actions/download-dists@main
         with:
           artifact: dist-tagged
+      # Inline, not inside download-dists: nesting this Docker action in a
+      # composite action makes GitHub resolve its image against the wrapper's
+      # repo. See reqstool/.github#95.
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+        with:
+          attestations: true
 
   # Last, deliberately. Everything above can fail, and until this runs nothing
   # resolving "the latest release" can see what was built -- the release is still