diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 86bbed6..7658072 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           go-version: '1.25'
 
-      - uses: anchore/sbom-action/download-syft@deef08a0db64bfad603422135db61477b16cef56 # v0.22.1
+      - uses: anchore/sbom-action/download-syft@28d71544de8eaf1b958d335707167c5f783590ad # v0.22.2
 
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6