diff --git a/.github/workflows/releaser-master.yml b/.github/workflows/releaser-master.yml
index ddf51ac6683..5b6f76a9135 100644
--- a/.github/workflows/releaser-master.yml
+++ b/.github/workflows/releaser-master.yml
@@ -29,8 +29,8 @@ jobs:
           go-version-file: go.mod
           cache: true
 
-      - uses: sigstore/cosign-installer@v3.7.0
-      - uses: anchore/sbom-action/download-syft@v0.17.9
+      - uses: sigstore/cosign-installer@v3.8.0
+      - uses: anchore/sbom-action/download-syft@v0.18.0
 
       - uses: docker/login-action@v3
         with:
diff --git a/.github/workflows/releaser-nightly.yml b/.github/workflows/releaser-nightly.yml
index 47b6cabb223..62066db24a1 100644
--- a/.github/workflows/releaser-nightly.yml
+++ b/.github/workflows/releaser-nightly.yml
@@ -23,8 +23,8 @@ jobs:
           go-version-file: go.mod
           cache: true
 
-      - uses: sigstore/cosign-installer@v3.7.0
-      - uses: anchore/sbom-action/download-syft@v0.17.9
+      - uses: sigstore/cosign-installer@v3.8.0
+      - uses: anchore/sbom-action/download-syft@v0.18.0
 
       - uses: docker/login-action@v3
         with: