diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f76424c8..0c2f8311 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -609,7 +609,7 @@ jobs:
     # attached to the GitHub release — required by many corporate/government
     # procurement processes (EO 14028) and useful for downstream scanners.
     - name: Generate SBOM (SPDX)
-      uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610  # v0.24.0
+      uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26  # v0.24.2
       with:
         path: .
         format: spdx-json
@@ -618,7 +618,7 @@ jobs:
         upload-release-assets: false
 
     - name: Generate SBOM (CycloneDX)
-      uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610  # v0.24.0
+      uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26  # v0.24.2
       with:
         path: .
         format: cyclonedx-json