diff --git a/.github/workflows/release-artifacts.yml b/.github/workflows/release-artifacts.yml
index ed07a19..1819666 100644
--- a/.github/workflows/release-artifacts.yml
+++ b/.github/workflows/release-artifacts.yml
@@ -40,7 +40,7 @@ jobs:
           sha256sum dist/*.tar.gz > dist/SHA256SUMS
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@28d71544de8eaf1b958d335707167c5f783590ad
+        uses: anchore/sbom-action/download-syft@57aae528053a48a3f6235f2d9461b05fbcb7366d
 
       - name: Generate SBOMs
         run: |
diff --git a/.github/workflows/release-skill.yml b/.github/workflows/release-skill.yml
index 918e132..75f6aa1 100644
--- a/.github/workflows/release-skill.yml
+++ b/.github/workflows/release-skill.yml
@@ -45,7 +45,7 @@ jobs:
         uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@28d71544de8eaf1b958d335707167c5f783590ad
+        uses: anchore/sbom-action/download-syft@57aae528053a48a3f6235f2d9461b05fbcb7366d
 
       - name: Install Trivy
         uses: aquasecurity/setup-trivy@3fb12ec12f41e471780db15c232d5dd185dcb514