diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0602ae242b4..dd380e770ab 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -81,7 +81,7 @@ jobs:
             ./dist/*.apk
           key: ${{ runner.os }}-go-${{ hashFiles('**/*.go') }}-${{ hashFiles('**/go.sum') }}
       - uses: sigstore/cosign-installer@v2.5.1
-      - uses: anchore/sbom-action/download-syft@v0.11.0
+      - uses: anchore/sbom-action/download-syft@v0.12.0
       - name: setup-validate-krew-manifest
         run: go install sigs.k8s.io/krew/cmd/validate-krew-manifest@latest
       - name: setup-tparse