diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8fb2f999..0188e526 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ jobs:
           go-version-file: go.mod
       
       - name: Install syft for sbom generation
-        uses: anchore/sbom-action/download-syft@v0.17.9
+        uses: anchore/sbom-action/download-syft@v0.18.0
 
       - name: Build snapshot artifacts
         uses: goreleaser/goreleaser-action@v6
diff --git a/.github/workflows/e2e_checks.yml b/.github/workflows/e2e_checks.yml
index 41a6c602..68495035 100644
--- a/.github/workflows/e2e_checks.yml
+++ b/.github/workflows/e2e_checks.yml
@@ -45,7 +45,7 @@ jobs:
           }' > ~/.config/kathara.conf
 
       - name: Install syft for sbom generation
-        uses: anchore/sbom-action/download-syft@v0.17.9
+        uses: anchore/sbom-action/download-syft@v0.18.0
 
       - name: Build binary for e2e
         uses: goreleaser/goreleaser-action@v6
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index effece78..6cf4b3c1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -39,7 +39,7 @@ jobs:
           password: ${{ secrets.MTR_PASSWORD }}
       
       - name: Install syft for sbom generation
-        uses: anchore/sbom-action/download-syft@v0.17.9
+        uses: anchore/sbom-action/download-syft@v0.18.0
 
       - name: Build, push & release
         uses: goreleaser/goreleaser-action@v6