diff --git a/.github/workflows/supply-chain.yml b/.github/workflows/supply-chain.yml
index e6aabe5..3bc5aa3 100644
--- a/.github/workflows/supply-chain.yml
+++ b/.github/workflows/supply-chain.yml
@@ -32,7 +32,7 @@ jobs:
           mkdir -p dist/sbom
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@v0.17.9
+        uses: anchore/sbom-action/download-syft@v0.20.8
         with:
           syft-version: v1.16.0
 
@@ -135,7 +135,7 @@ jobs:
           provenance: false
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@v0.17.9
+        uses: anchore/sbom-action/download-syft@v0.20.8
         with:
           syft-version: v1.16.0