diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 323242a..aee6730 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -28,7 +28,7 @@ jobs:
           SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct) python -m build
       - name: Generate SBOM
         id: sbom
-        uses: anchore/sbom-action@61119d458adab75f756bc0b9e4bde25725f86a7a # v0.17.2
+        uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8
       - name: "Generate hashes"
         id: hash
         run: |
diff --git a/.github/workflows/pullrequest.yaml b/.github/workflows/pullrequest.yaml
index a0ecc6d..95a238f 100644
--- a/.github/workflows/pullrequest.yaml
+++ b/.github/workflows/pullrequest.yaml
@@ -69,7 +69,7 @@ jobs:
           python -m build
       - name: Generate SBOM
         id: sbom
-        uses: anchore/sbom-action@61119d458adab75f756bc0b9e4bde25725f86a7a # v0.17.2
+        uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8
       - name: "Generate hashes"
         id: hash
         run: |