diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index bf5f279..a516ce0 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -33,7 +33,7 @@ jobs:
           password: ${{ secrets.GH_PAT }}
           registry: ghcr.io
       - uses: sigstore/cosign-installer@v3.7.0
-      - uses: anchore/sbom-action/download-syft@v0.17.7
+      - uses: anchore/sbom-action/download-syft@v0.17.8
       - uses: goreleaser/goreleaser-action@v6
         with:
           distribution: goreleaser-pro