diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index e8dc66c1..56043508 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -92,7 +92,7 @@ jobs:
           cosign-release: 'v2.2.4'
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@fc46e51fd3cb168ffb36c6d1915723c47db58abb # ratchet:anchore/sbom-action/download-syft@v0.17.7
+        uses: anchore/sbom-action/download-syft@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # ratchet:anchore/sbom-action/download-syft@v0.17.9
       - name: Login to Container registries
         if: startsWith(github.ref, 'refs/tags/')
         run: |
@@ -158,7 +158,7 @@ jobs:
           cosign-release: 'v2.2.4'
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@fc46e51fd3cb168ffb36c6d1915723c47db58abb # ratchet:anchore/sbom-action/download-syft@v0.17.7
+        uses: anchore/sbom-action/download-syft@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # ratchet:anchore/sbom-action/download-syft@v0.17.9
       - name: Login to Container registries
         run: |
           echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u philipssoftware --password-stdin