diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 9fdb0cb8..ffa0a1e1 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -92,7 +92,7 @@ jobs:
           cosign-release: 'v2.2.2'
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@719133684c7d294116626d1344fe64f0d2ff3e9e # ratchet:anchore/sbom-action/download-syft@v0.15.2
+        uses: anchore/sbom-action/download-syft@b6a39da80722a2cb0ef5d197531764a89b5d48c3 # ratchet:anchore/sbom-action/download-syft@v0.15.8
       - name: Login to Container registries
         if: startsWith(github.ref, 'refs/tags/')
         run: |
@@ -158,7 +158,7 @@ jobs:
           cosign-release: 'v2.2.2'
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@719133684c7d294116626d1344fe64f0d2ff3e9e # ratchet:anchore/sbom-action/download-syft@v0.15.2
+        uses: anchore/sbom-action/download-syft@b6a39da80722a2cb0ef5d197531764a89b5d48c3 # ratchet:anchore/sbom-action/download-syft@v0.15.8
       - name: Login to Container registries
         run: |
           echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u philipssoftware --password-stdin