diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3347713..b8d66ba 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,7 +45,7 @@ jobs:
       with:
         go-version: '~1.21'
     - name: Download Syft
-      uses: anchore/sbom-action/download-syft@422cb34a0f8b599678c41b21163ea6088edb2624 # v0.14.1
+      uses: anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5
     - name: Run GoReleaser
       uses: goreleaser/goreleaser-action@v6
       with: