diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1bb04d96..9c65de7e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -27,7 +27,7 @@ jobs:
         name: install cosign
         uses: sigstore/cosign-installer@main
       -
-        uses: anchore/sbom-action/download-syft@v0.16.0
+        uses: anchore/sbom-action/download-syft@v0.17.2
       -
         name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v4