diff --git a/Formula/r/ratify.rb b/Formula/r/ratify.rb
index 1c8576658951..0fe02000275c 100644
--- a/Formula/r/ratify.rb
+++ b/Formula/r/ratify.rb
@@ -2,10 +2,17 @@ class Ratify < Formula
   desc "Artifact Ratification Framework"
   homepage "https://ratify.dev"
   url "https://github.com/notaryproject/ratify/archive/refs/tags/v1.4.1.tar.gz"
-  sha256 "58db052b8a02a7d5cc78dde837530c5d7fe0f525facd84d8aac4ef7ab93f5ce2"
+  sha256 "fe80cd14f68e69f9ff0951dce74b3954c158aac8608f9fa5fc4508d1e10f23a5"
   license "Apache-2.0"
   head "https://github.com/notaryproject/ratify.git", branch: "main"
 
+  # Upstream moves the tag until a release is finally made and marked as latest,
+  # so we have to use the `GithubLatest` strategy to avoid picking up a pre-release.
+  livecheck do
+    url :stable
+    strategy :github_latest
+  end
+
   bottle do
     sha256 cellar: :any_skip_relocation, arm64_tahoe:   "6fdbdf1f9e1245d66cdb6dfda5362bba5dd3f1b826f76100604b8d94a7e47e17"
     sha256 cellar: :any_skip_relocation, arm64_sequoia: "b52b32cd9d05985a26682e45778cb96350625b7fb6bbee7b1d9727e9c1a98690"