diff --git a/.github/workflows/container-release.yml b/.github/workflows/container-release.yml
index 2c67d47..f2d368d 100644
--- a/.github/workflows/container-release.yml
+++ b/.github/workflows/container-release.yml
@@ -191,7 +191,7 @@ jobs:
       - name: Prepare release evidence directory
         run: mkdir -p release-digests
       - name: Generate downloadable CycloneDX SBOM
-        uses: anchore/sbom-action@v0.24.0
+        uses: anchore/sbom-action@v0.24.2
         with:
           image: ${{ env.IMAGE_NAMESPACE }}/mailflow-${{ matrix.name }}@${{ steps.build.outputs.digest }}
           format: cyclonedx-json
diff --git a/.github/workflows/desktop-release.yml b/.github/workflows/desktop-release.yml
index e909571..62baaee 100644
--- a/.github/workflows/desktop-release.yml
+++ b/.github/workflows/desktop-release.yml
@@ -196,7 +196,7 @@ jobs:
             --config "$MAILFLOW_TAURI_RELEASE_CONFIG"
 
       - id: syft
-        uses: anchore/sbom-action/download-syft@v0.24.0
+        uses: anchore/sbom-action/download-syft@v0.24.2
 
       - uses: sigstore/cosign-installer@v4.1.2