diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index 4009ae2..bf9c1dc 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -31,7 +31,7 @@ jobs:
       - name: install cosign
         uses: sigstore/cosign-installer@main
 
-      - uses: anchore/sbom-action/download-syft@v0.17.2
+      - uses: anchore/sbom-action/download-syft@v0.17.5
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3