diff --git a/.github/workflows/scans.yml b/.github/workflows/scans.yml
index c228dd72..b489dcc8 100644
--- a/.github/workflows/scans.yml
+++ b/.github/workflows/scans.yml
@@ -292,7 +292,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
-      - uses: anchore/sbom-action@28d71544de8eaf1b958d335707167c5f783590ad # v0
+      - uses: anchore/sbom-action@17ae1740179002c89186b61233e0f892c3118b11 # v0
         with:
           output-file: "${{ github.event.repository.name }}-sbom.spdx.json"
           dependency-snapshot: true