diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9b4e5608..dc8e5218 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -27,7 +27,7 @@ jobs:
         name: install cosign
         uses: sigstore/cosign-installer@main
       -
-        uses: anchore/sbom-action/download-syft@v0.18.0
+        uses: anchore/sbom-action/download-syft@v0.20.4
       -
         name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6