diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 6da2803..577e7ed 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -73,7 +73,7 @@ jobs:
         with:
           cosign-release: ${{ env.COSIGN_VERSION }}
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@422cb34a0f8b599678c41b21163ea6088edb2624 # ratchet:anchore/sbom-action/download-syft@v0.14.1
+        uses: anchore/sbom-action/download-syft@41f7a6c033dbcdf78917f23b652c8b8146298c85 # ratchet:anchore/sbom-action/download-syft@v0.15.4
         with:
           syft-version: ${{ env.SYFT_VERSION }}
       - name: Put key on file