diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 58e99eee..fb503a10 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -417,7 +417,7 @@ jobs:
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
 
       - name: Upload SBOM to GitHub Release
-        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
+        uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3
         with:
           files: |
             ${{ steps.temp-dir.outputs.path }}/sbom-${{ github.event.repository.name }}-${{ env.PACKAGE_VERSION }}.spdx.json