diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index a2c4e9a..0b8da0f 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -35,7 +35,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version: 1.22.x
-      - uses: anchore/sbom-action/download-syft@v0.16.0
+      - uses: anchore/sbom-action/download-syft@v0.17.2
       - name: setup qemu
         id: qemu
         uses: docker/setup-qemu-action@v3