diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b96a6b26e..fdbff9eda 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -534,7 +534,7 @@ jobs:
 
       - name: VirusTotal Scan
         id: virustotal_step
-        uses: crazy-max/ghaction-virustotal@v3
+        uses: crazy-max/ghaction-virustotal@v4
         with:
           vt_api_key: ${{ secrets.VIRUSTOTAL_API_KEY }}
           update_release_body: false # `true` won't work because trigger type is not release