diff --git a/.github/workflows/release-sbom.yml b/.github/workflows/release-sbom.yml
index 67e3e14e5..3a196b24f 100644
--- a/.github/workflows/release-sbom.yml
+++ b/.github/workflows/release-sbom.yml
@@ -40,7 +40,7 @@ jobs:
           message: Starting generating sbom for ${{ github.repository }} with tag ${{ inputs.tag }}......
         if: always()
       - name: Run SBOM
-        uses: anchore/sbom-action@e11c554f704a0b820cbf8c51673f6945e0731532  # v0.20.0
+        uses: anchore/sbom-action@7b36ad622f042cab6f59a75c2ac24ccb256e9b45  # v0.20.4
         with:
           upload-artifact-retention: 7
           upload-release-assets: false