diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml
index 128f62e..d78e2e3 100644
--- a/.github/workflows/releaser.yml
+++ b/.github/workflows/releaser.yml
@@ -49,7 +49,7 @@ jobs:
           cache-dependency-path: |
             cli/go.sum
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@28d71544de8eaf1b958d335707167c5f783590ad # v0.22.2
+        uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
       - name: Install Cosign
         uses: sigstore/cosign-installer@v4.0.0
       - name: Run GoReleaser