diff --git a/.github/workflows/pre-commit.yaml b/.github/workflows/pre-commit.yaml
index 6f258e77..7422896f 100644
--- a/.github/workflows/pre-commit.yaml
+++ b/.github/workflows/pre-commit.yaml
@@ -84,7 +84,11 @@ jobs:
       - name: Set up TFLint
         uses: terraform-linters/setup-tflint@6e1e0642c0289bd619021bf6b34e3c08ed1e005a # v6
         with:
-          tflint_version: v0.61.0
+          # v0.62.0+ ignores forbidden attestation-fetch errors during `tflint
+          # --init`; v0.61.0 panicked (sigstore-go nil TlogEntries) when the
+          # plugin attestation fetch was forbidden in restricted-token CI.
+          # https://github.com/terraform-linters/tflint/pull/2481
+          tflint_version: v0.62.1
 
       - name: Init TFLint
         env: