diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index 3fd0890c..c28d4732 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -36,7 +36,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-go-
       - name: Setup Kubernetes
-        uses: helm/kind-action@v1.10.0
+        uses: helm/kind-action@v1.12.0
         with:
           install_only: true
       - uses: yokawasa/action-setup-kube-tools@v0.11.2
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 629dab31..d795c02a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -97,7 +97,7 @@ jobs:
         mkdir -p output
         helm template ./deploy --namespace ocm-system --set "manager.image.tag=${{ env.RELEASE_VERSION }}" --include-crds > ./output/install.yaml
     - name: Setup Syft
-      uses: anchore/sbom-action/download-syft@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8
+      uses: anchore/sbom-action/download-syft@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9
     - name: Setup Cosign
       uses: sigstore/cosign-installer@v3.7.0
     - name: Run goreleaser