diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 9fdb0cb8..28410449 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -92,7 +92,7 @@ jobs:
           cosign-release: 'v2.2.2'
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@719133684c7d294116626d1344fe64f0d2ff3e9e # ratchet:anchore/sbom-action/download-syft@v0.15.2
+        uses: anchore/sbom-action/download-syft@9fece9e20048ca9590af301449208b2b8861333b # ratchet:anchore/sbom-action/download-syft@v0.15.9
       - name: Login to Container registries
         if: startsWith(github.ref, 'refs/tags/')
         run: |
@@ -158,7 +158,7 @@ jobs:
           cosign-release: 'v2.2.2'
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@719133684c7d294116626d1344fe64f0d2ff3e9e # ratchet:anchore/sbom-action/download-syft@v0.15.2
+        uses: anchore/sbom-action/download-syft@9fece9e20048ca9590af301449208b2b8861333b # ratchet:anchore/sbom-action/download-syft@v0.15.9
       - name: Login to Container registries
         run: |
           echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u philipssoftware --password-stdin