diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bf6afc2..43e9ac0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -49,7 +49,7 @@ jobs:
           echo "hashes=$(sha256sum ./rsd | base64 -w0)" >> "$GITHUB_OUTPUT"
       - name: Generate SBOM via Syft
         id: sbom
-        uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693
+        uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75
         with:
           output-file: ${{ github.workspace }}/rsd-sbom.spdx
       - name: Generate SBOM signature