diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3347713..2a65b0f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,7 +45,7 @@ jobs:
       with:
         go-version: '~1.21'
     - name: Download Syft
-      uses: anchore/sbom-action/download-syft@422cb34a0f8b599678c41b21163ea6088edb2624 # v0.14.1
+      uses: anchore/sbom-action/download-syft@0b82b0b1a22399a1c542d4d656f70cd903571b5c # v0.21.1
     - name: Run GoReleaser
       uses: goreleaser/goreleaser-action@v6
       with: