diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3c1c4f5..29214f2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           go-version: '1.25'
 
-      - uses: anchore/sbom-action/download-syft@0b82b0b1a22399a1c542d4d656f70cd903571b5c # v0.21.1
+      - uses: anchore/sbom-action/download-syft@62ad5284b8ced813296287a0b63906cb364b73ee # v0.22.0
 
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6