diff --git a/.github/workflows/nightlies.yml b/.github/workflows/nightlies.yml
index 0110801dc93..e8f3fe4ca5c 100644
--- a/.github/workflows/nightlies.yml
+++ b/.github/workflows/nightlies.yml
@@ -23,8 +23,8 @@ jobs:
           go-version: "1.22.x"
           cache: true
 
-      - uses: sigstore/cosign-installer@v3.5.0
-      - uses: anchore/sbom-action/download-syft@v0.17.0
+      - uses: sigstore/cosign-installer@v3.6.0
+      - uses: anchore/sbom-action/download-syft@v0.17.2
 
       - uses: docker/login-action@v3
         with:
diff --git a/.github/workflows/releaser-master.yml b/.github/workflows/releaser-master.yml
index 96a622e3272..7eda0536532 100644
--- a/.github/workflows/releaser-master.yml
+++ b/.github/workflows/releaser-master.yml
@@ -24,8 +24,8 @@ jobs:
           go-version: "1.22.x"
           cache: true
 
-      - uses: sigstore/cosign-installer@v3.5.0
-      - uses: anchore/sbom-action/download-syft@v0.17.0
+      - uses: sigstore/cosign-installer@v3.6.0
+      - uses: anchore/sbom-action/download-syft@v0.17.2
 
       - uses: docker/login-action@v3
         with:
diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml
index f3317419510..5433582cace 100644
--- a/.github/workflows/releaser.yml
+++ b/.github/workflows/releaser.yml
@@ -23,8 +23,8 @@ jobs:
           go-version: "1.22.x"
           cache: true
 
-      - uses: sigstore/cosign-installer@v3.5.0
-      - uses: anchore/sbom-action/download-syft@v0.17.0
+      - uses: sigstore/cosign-installer@v3.6.0
+      - uses: anchore/sbom-action/download-syft@v0.17.2
 
       - uses: docker/login-action@v3
         with: