diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a0141bb..bfdfc6b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -49,7 +49,7 @@ jobs:
           echo "hashes=$(sha256sum ./rsd | base64 -w0)" >> "$GITHUB_OUTPUT"
       - name: Generate SBOM via Syft
         id: sbom
-        uses: anchore/sbom-action@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5
+        uses: anchore/sbom-action@ab9d16d4b419c9d1a02df5213fa0ebe965ca5a57
         with:
           output-file: ${{ github.workspace }}/rsd-sbom.spdx
       - name: Generate SBOM signature