diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml
index 1ba43fa..e9fd293 100644
--- a/.github/workflows/build-publish.yml
+++ b/.github/workflows/build-publish.yml
@@ -115,7 +115,7 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Generate SBOM
-      uses: sbomify/github-action@e6cdc68ce11d640b652364c25f806db4a8bfa16c # v0.3.2
+      uses: sbomify/github-action@300e8bc1445e9b748a73a52f759d5db538df9d42 # v0.4.0
       env:
         TOKEN: ${{ secrets.SBOMIFY_TOKEN }}
         COMPONENT_ID: 'wy8Kpn8rF9'