diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml
index f9ef6b64d..00cf52381 100644
--- a/.github/workflows/releaser.yml
+++ b/.github/workflows/releaser.yml
@@ -49,7 +49,7 @@ jobs:
           cache-dependency-path: |
             cli/go.sum
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@28d71544de8eaf1b958d335707167c5f783590ad # v0.22.2
+        uses: anchore/sbom-action/download-syft@17ae1740179002c89186b61233e0f892c3118b11 # v0.23.0
       - name: Install Cosign
         uses: sigstore/cosign-installer@v4.0.0
       - name: Run GoReleaser