diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 98a513f..4cf2181 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -28,7 +28,7 @@ jobs:
           SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct) python -m build
       - name: Generate SBOM
         id: sbom
-        uses: anchore/sbom-action@a930d0ac434e3182448fe678398ba5713717112a # v0.21.0
+        uses: anchore/sbom-action@28d71544de8eaf1b958d335707167c5f783590ad # v0.22.2
       - name: "Generate hashes"
         id: hash
         run: |
diff --git a/.github/workflows/pullrequest.yaml b/.github/workflows/pullrequest.yaml
index c168446..aed84be 100644
--- a/.github/workflows/pullrequest.yaml
+++ b/.github/workflows/pullrequest.yaml
@@ -69,7 +69,7 @@ jobs:
           python -m build
       - name: Generate SBOM
         id: sbom
-        uses: anchore/sbom-action@a930d0ac434e3182448fe678398ba5713717112a # v0.21.0
+        uses: anchore/sbom-action@28d71544de8eaf1b958d335707167c5f783590ad # v0.22.2
       - name: "Generate hashes"
         id: hash
         run: |