diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4d4ab25..4f1159a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -34,7 +34,7 @@ jobs:
       with:
         cosign-release: 'v2.1.1'
 
-    - uses: anchore/sbom-action/download-syft@v0.15.0 # installs syft
+    - uses: anchore/sbom-action/download-syft@v0.15.9 # installs syft
 
     - uses: actions/setup-go@v4
       with: