diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml
index 9f856b9..747f17f 100644
--- a/.github/workflows/releaser.yml
+++ b/.github/workflows/releaser.yml
@@ -45,7 +45,7 @@ jobs:
           go-version-file: 'go.mod'
           cache: true
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@8d0a6505bf28ced3e85154d13dc6af83299e13f1 # v0.17.4
+        uses: anchore/sbom-action/download-syft@1ca97d9028b51809cf6d3c934c3e160716e1b605 # v0.17.5
       - name: Install Cosign
         uses: sigstore/cosign-installer@v3.7.0
       - name: Run GoReleaser