diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e254654b..33253327 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -65,7 +65,7 @@ jobs:
       run: dotnet test --configuration Release --logger:"GitHubActions;report-warnings=false"
 
     - name: Generate SBOM
-      uses: anchore/sbom-action@aa0e114b2e19480f157109b9922bda359bd98b90 # v0.20.8
+      uses: anchore/sbom-action@8e94d75ddd33f69f691467e42275782e4bfefe84 # v0.20.9
       if: runner.os == 'Windows'
       with:
         artifact-name: grafana-opentelemetry-dotnet.spdx.json