diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d172f24..a37d8bf 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,10 +25,10 @@ jobs:
           cache: true
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62
+        uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@v0.20.7
+        uses: anchore/sbom-action/download-syft@v0.20.8
 
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a