diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index 9632063..5b1de09 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -61,7 +61,7 @@ jobs:
         run: mkdir -p dist/security/sbom
 
       - name: Generate SPDX SBOM and submit dependency snapshot
-        uses: anchore/sbom-action@28d71544de8eaf1b958d335707167c5f783590ad
+        uses: anchore/sbom-action@17ae1740179002c89186b61233e0f892c3118b11
         with:
           file: package-lock.json
           format: spdx-json