diff --git a/.github/workflows/ci-release.yml b/.github/workflows/ci-release.yml
index 3b1efe5d166..4c13907e71f 100644
--- a/.github/workflows/ci-release.yml
+++ b/.github/workflows/ci-release.yml
@@ -111,7 +111,7 @@ jobs:
         QUAY_TOKEN: ${{ secrets.QUAY_TOKEN }}
 
     - name: Generate SBOM
-      uses: anchore/sbom-action@719133684c7d294116626d1344fe64f0d2ff3e9e # v0.15.2
+      uses: anchore/sbom-action@9fece9e20048ca9590af301449208b2b8861333b # v0.15.9
       with:
         output-file: jaeger-SBOM.spdx.json
         upload-release-assets: false