diff --git a/.github/workflows/sbom.yaml b/.github/workflows/sbom.yaml
index 3597bda..0e2a98d 100644
--- a/.github/workflows/sbom.yaml
+++ b/.github/workflows/sbom.yaml
@@ -14,7 +14,7 @@ jobs:
         uses: actions/checkout@v3
       - name: Install Syft
         run: |
-          curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
+          curl -sSfL https://raw.githubusercontent.com/anchore/syft/4fc17edd146af34ab06f5b0443ef8ddac3aaf076/install.sh | sh -s -- -b /usr/local/bin
       - name: Set tag
         run: |
           version=$(yq '(.version|split("-"))[0]' rockcraft.yaml)