diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index bda6e533..700ff74c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -417,7 +417,7 @@ jobs:
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
 
       - name: Upload SBOM to GitHub Release
-        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
+        uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2.3.2
         with:
           files: |
             ${{ steps.temp-dir.outputs.path }}/sbom-${{ github.event.repository.name }}-${{ env.PACKAGE_VERSION }}.spdx.json