diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8e4d8033..ad722148 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -87,7 +87,7 @@ jobs:
           pip install semgrep==1.164.0
           semgrep scan --error --config p/python --config p/owasp-top-ten src/niles/
       - name: SBOM (CycloneDX via syft)
-        uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26  # v0.24.2
+        uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c  # v0.24.3
         with:
           path: .
           artifact-name: niles-sbom.cdx.json
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index f68de382..ee0ed18a 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -16,7 +16,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26  # v0.24.2
+        uses: anchore/sbom-action/download-syft@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c  # v0.24.3
 
       - name: Generate SBOM
         run: syft dir:. -o cyclonedx-json=sbom.cdx.json