diff --git a/.github/workflows/ci-release.yml b/.github/workflows/ci-release.yml
index 3f253579e50..dd0b2f1005a 100644
--- a/.github/workflows/ci-release.yml
+++ b/.github/workflows/ci-release.yml
@@ -76,6 +76,6 @@ jobs:
         QUAY_TOKEN: ${{ secrets.QUAY_TOKEN }}
 
     - name: SBOM Generation
-      uses: anchore/sbom-action@v0
+      uses: anchore/sbom-action@b5042e9d19d8b32849779bfe17673ff84aec702d
       with:
         artifact-name: jaeger-SBOM.spdx.json