diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a46deaf..852a4bc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -90,7 +90,7 @@ jobs:
         uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v1.4.1
       
       - name: Generate SBOM
-        uses: anchore/sbom-action/download-syft@f5e124a5e5e1d497a692818ae907d3c45829d033 # v0.6.0
+        uses: anchore/sbom-action/download-syft@8d0a6505bf28ced3e85154d13dc6af83299e13f1 # v0.6.0
 
       # https://goreleaser.com/ci/actions/
       - name: Run GoReleaser