diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index fbbad368..ddc96221 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -11,7 +11,7 @@ permissions: {}
 
 jobs:
   sbom:
-    uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@5456c9f9c5dd9c5bde239bc39cff36d1b3995bf1
+    uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@fefef2fcb29fdf47eaf1fc7417d50adc0cd1b717
     with:
       sbom_name: ${{ github.event.release.tag_name || github.sha }}
     permissions: