diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c0c41745..e3218622 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -417,7 +417,7 @@ jobs:
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
 
       - name: Upload SBOM to GitHub Release
-        uses: softprops/action-gh-release@62c96d0c4e8a889135c1f3a25910db8dbe0e85f7 # v2.3.4
+        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
         with:
           files: |
             ${{ steps.temp-dir.outputs.path }}/sbom-${{ github.event.repository.name }}-${{ env.PACKAGE_VERSION }}.spdx.json