diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 1243a9ca8..649627478 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -49,4 +49,4 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
       - id: deployment
-        uses: actions/deploy-pages@20a4baa1095bad40ba7d6ca0d9abbc220b76603f # v1.2.3
+        uses: actions/deploy-pages@0243b6c10d06cb8e95ed8ee471231877621202c0 # v1.2.4
diff --git a/sigstore/_cli.py b/sigstore/_cli.py
index 3d0ff7488..093c848c8 100644
--- a/sigstore/_cli.py
+++ b/sigstore/_cli.py
@@ -835,7 +835,7 @@ def _collect_verification_state(
 def _verify_identity(args: argparse.Namespace) -> None:
     verifier, files_with_materials = _collect_verification_state(args)
 
-    for (file, materials) in files_with_materials:
+    for file, materials in files_with_materials:
         policy_ = policy.Identity(
             identity=args.cert_identity,
             issuer=args.cert_oidc_issuer,
@@ -934,7 +934,7 @@ def _verify_github(args: argparse.Namespace) -> None:
     policy_ = policy.AllOf(inner_policies)
 
     verifier, files_with_materials = _collect_verification_state(args)
-    for (file, materials) in files_with_materials:
+    for file, materials in files_with_materials:
         result = verifier.verify(materials=materials, policy=policy_)
 
         if result: