diff --git a/src/ci/install-sfw.ts b/src/ci/install-sfw.ts
index efb0e47..042e402 100644
--- a/src/ci/install-sfw.ts
+++ b/src/ci/install-sfw.ts
@@ -8,7 +8,7 @@ import path from "node:path";
 import { commandPath } from "./process.js";
 import type { ExportVariable, InstallCommand, RunInstallEntry } from "./types.js";
 
-export const SFW_VERSION = "v1.15.0";
+export const SFW_VERSION = "v1.15.1";
 const SFW_RELEASE_BASE = `https://github.com/SocketDev/sfw-free/releases/download/${SFW_VERSION}`;
 const DOWNLOAD_TIMEOUT_MS = 60_000;
 type DownloadClient = typeof httpGet;
diff --git a/src/install-sfw.ts b/src/install-sfw.ts
index 168c336..bb7b2aa 100644
--- a/src/install-sfw.ts
+++ b/src/install-sfw.ts
@@ -14,7 +14,7 @@ import type { Inputs } from "./types.js";
 // reproducibility. For stricter supply-chain hygiene, users can compose
 // `socketdev/action@<sha>` ahead of this action — see README "Advanced:
 // stricter supply chain via socketdev/action".
-const SFW_VERSION = "v1.15.0";
+const SFW_VERSION = "v1.15.1";
 const SFW_RELEASE_BASE = `https://github.com/SocketDev/sfw-free/releases/download/${SFW_VERSION}`;
 const INSTALL_MAX_ROUNDS = 2;
 const INSTALL_RETRY_DELAY_MS = 2000;