diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3f31403b..65086e2e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -105,7 +105,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-go-
       - uses: sigstore/cosign-installer@v2.1.0
-      - uses: anchore/sbom-action/download-syft@v0.7.0
+      - uses: anchore/sbom-action/download-syft@v0.8.0
       - uses: docker/setup-qemu-action@v1
       - uses: docker/setup-buildx-action@v1
       - run: task setup