diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index 2ad3874..303b379 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -29,7 +29,7 @@ jobs:
           go-version: 1.21
       - name: install cosign
         uses: sigstore/cosign-installer@main
-      - uses: anchore/sbom-action/download-syft@v0.17.7
+      - uses: anchore/sbom-action/download-syft@v0.17.8
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
         with: