diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml
index 2adaa78..0dad525 100644
--- a/.github/workflows/releaser.yml
+++ b/.github/workflows/releaser.yml
@@ -45,7 +45,7 @@ jobs:
           go-version-file: 'go.mod'
           cache: true
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@61119d458adab75f756bc0b9e4bde25725f86a7a # v0.17.2
+        uses: anchore/sbom-action/download-syft@8d0a6505bf28ced3e85154d13dc6af83299e13f1 # v0.17.4
       - name: Install Cosign
         uses: sigstore/cosign-installer@v3.7.0
       - name: Run GoReleaser