diff --git a/package.json b/package.json
index b4020d4..eb3c6e4 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "@actions/core": "^1.2.5",
     "@actions/exec": "^1.0.4",
     "addressparser": "^1.0.1",
-    "openpgp": "^4.10.7"
+    "openpgp": "^4.10.8"
   },
   "devDependencies": {
     "@types/jest": "^26.0.0",
diff --git a/yarn.lock b/yarn.lock
index 20733ab..bae35f5 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2734,10 +2734,10 @@ onetime@^5.1.0:
   dependencies:
     mimic-fn "^2.1.0"
 
-openpgp@^4.10.7:
-  version "4.10.7"
-  resolved "https://registry.yarnpkg.com/openpgp/-/openpgp-4.10.7.tgz#e969239ebb689093c5a73ea97e73a7d9c2a565eb"
-  integrity sha512-+7EkD/btnvIyGkslB0p3W123u/dajMBcfzMfOIevlZBPvCWLJXGzgNFMM5CYXUNITeBUpxCxwgHeniqr+UfESQ==
+openpgp@^4.10.8:
+  version "4.10.8"
+  resolved "https://registry.yarnpkg.com/openpgp/-/openpgp-4.10.8.tgz#b08d9f52ced344128cf477dc060fc233792078aa"
+  integrity sha512-l+/u3TyR3+qS7mN0+HoNQRu/2BzHdLOMOOCDRLDE9gZGAqpKkD9ZD7hkpjan+GGY3f0nHaE7Qv7kI6qmQK+AkA==
   dependencies:
     asn1.js "^5.0.0"
     node-fetch "^2.1.2"