diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 7bfd2165..5acc22b2 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -33,7 +33,7 @@ jobs:
         with:
           platforms: arm64
       - uses: docker/setup-buildx-action@v3
-      - uses: anchore/sbom-action/download-syft@v0.17.0
+      - uses: anchore/sbom-action/download-syft@v0.17.2
       - name: Cache tools
         uses: actions/cache@v4
         with:
diff --git a/.github/workflows/snapshot.yaml b/.github/workflows/snapshot.yaml
index cb791b9d..88f5dec6 100644
--- a/.github/workflows/snapshot.yaml
+++ b/.github/workflows/snapshot.yaml
@@ -20,7 +20,7 @@ jobs:
         with:
           platforms: arm64
       - uses: docker/setup-buildx-action@v3
-      - uses: anchore/sbom-action/download-syft@v0.17.0
+      - uses: anchore/sbom-action/download-syft@v0.17.2
       - name: Cache tools
         uses: actions/cache@v4
         with:
diff --git a/internal/tools/go.mod b/internal/tools/go.mod
index 2b3bda5e..7a9330c9 100644
--- a/internal/tools/go.mod
+++ b/internal/tools/go.mod
@@ -107,7 +107,7 @@ require (
 	github.com/distribution/reference v0.6.0 // indirect
 	github.com/docker/cli v25.0.4+incompatible // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
-	github.com/docker/docker v26.1.4+incompatible // indirect
+	github.com/docker/docker v26.1.5+incompatible // indirect
 	github.com/docker/docker-credential-helpers v0.8.1 // indirect
 	github.com/docker/go-connections v0.4.0 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
diff --git a/internal/tools/go.sum b/internal/tools/go.sum
index 99b4b56d..8ae2ef81 100644
--- a/internal/tools/go.sum
+++ b/internal/tools/go.sum
@@ -251,8 +251,8 @@ github.com/docker/cli v25.0.4+incompatible h1:DatRkJ+nrFoYL2HZUzjM5Z5sAmcA5XGp+A
 github.com/docker/cli v25.0.4+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
 github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
-github.com/docker/docker v26.1.4+incompatible h1:vuTpXDuoga+Z38m1OZHzl7NKisKWaWlhjQk7IDPSLsU=
-github.com/docker/docker v26.1.4+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
+github.com/docker/docker v26.1.5+incompatible h1:NEAxTwEjxV6VbBMBoGG3zPqbiJosIApZjxlbrG9q3/g=
+github.com/docker/docker v26.1.5+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/docker-credential-helpers v0.8.1 h1:j/eKUktUltBtMzKqmfLB0PAgqYyMHOp5vfsD1807oKo=
 github.com/docker/docker-credential-helpers v0.8.1/go.mod h1:P3ci7E3lwkZg6XiHdRKft1KckHiO9a2rNtyFbZ/ry9M=
 github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=