diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 9fdb0cb8..9ee9d208 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -92,7 +92,7 @@ jobs:
           cosign-release: 'v2.2.2'
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@719133684c7d294116626d1344fe64f0d2ff3e9e # ratchet:anchore/sbom-action/download-syft@v0.15.2
+        uses: anchore/sbom-action/download-syft@c7f031d9249a826a082ea14c79d3b686a51d485a # ratchet:anchore/sbom-action/download-syft@v0.15.3
       - name: Login to Container registries
         if: startsWith(github.ref, 'refs/tags/')
         run: |
@@ -158,7 +158,7 @@ jobs:
           cosign-release: 'v2.2.2'
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@719133684c7d294116626d1344fe64f0d2ff3e9e # ratchet:anchore/sbom-action/download-syft@v0.15.2
+        uses: anchore/sbom-action/download-syft@c7f031d9249a826a082ea14c79d3b686a51d485a # ratchet:anchore/sbom-action/download-syft@v0.15.3
       - name: Login to Container registries
         run: |
           echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u philipssoftware --password-stdin