diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index cb30e172..47f67b9e 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -711,7 +711,7 @@ jobs:
       # built this" but "what is inside it". Both are needed to respond to a
       # published CVE without guessing.
       - name: Generate SBOM
-        uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610  # v0.24.0
+        uses: anchore/sbom-action@aa80c8c5bd439a416a62804f2151ab38c671a638  # v0.24.1
         with:
           path: ./repo
           format: cyclonedx-json