diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index d81ac28..a42bbc7 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -33,7 +33,7 @@ jobs:
           password: ${{ secrets.GH_PAT }}
           registry: ghcr.io
       - uses: sigstore/cosign-installer@v3.7.0
-      - uses: anchore/sbom-action/download-syft@v0.17.3
+      - uses: anchore/sbom-action/download-syft@v0.17.5
       - uses: goreleaser/goreleaser-action@v6
         with:
           distribution: goreleaser-pro