diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c579e01..292d77e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -29,7 +29,7 @@ jobs:
           go-version: 1.23
           cache: true
       - uses: sigstore/cosign-installer@v3.7.0         # installs cosign
-      - uses: anchore/sbom-action/download-syft@v0.17.8 # installs syft
+      - uses: anchore/sbom-action/download-syft@v0.17.9 # installs syft
       - uses: docker/login-action@v3                   # login to ghcr
         with:
           registry: ghcr.io