diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8005972..1f8c7e8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -211,7 +211,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054
+      - uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99
         with:
           version: v1.29.0
           config: .github/zizmor.yml
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index dd77d16..76e7f8a 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -228,7 +228,7 @@ jobs:
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6
 
       - name: Install the SBOM generator goreleaser expects
-        uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610
+        uses: anchore/sbom-action/download-syft@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26
         with:
           syft-version: v1.51.0
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6ef28d8..a2c05cc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -67,7 +67,7 @@ jobs:
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6
 
       - name: Install the SBOM generator goreleaser expects
-        uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610
+        uses: anchore/sbom-action/download-syft@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26
         with:
           syft-version: v1.51.0