diff --git a/.github/workflows/verify-spdx.yaml b/.github/workflows/verify-spdx.yaml
index ddc8ea7..465becc 100644
--- a/.github/workflows/verify-spdx.yaml
+++ b/.github/workflows/verify-spdx.yaml
@@ -21,18 +21,18 @@ jobs:
 
       - uses: chainguard-dev/actions/setup-spdx@d886686603afb809f7ef9b734b333e20b7ce5cda
         with:
-          spdx-tools-version: 1.1.0
+          spdx-tools-version: 1.1.8
 
       - uses: chainguard-dev/actions/setup-spdx@d886686603afb809f7ef9b734b333e20b7ce5cda
         with:
           download: false
-          spdx-tools-version: 1.1.0
+          spdx-tools-version: 1.1.8
           sbom-path: example-image-pause.spdx
 
       - uses: chainguard-dev/actions/setup-spdx@d886686603afb809f7ef9b734b333e20b7ce5cda
         with:
           download: false
-          spdx-tools-version: 1.1.0
+          spdx-tools-version: 1.1.8
           sbom-path: example-image-pause.spdx.json
 
       - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808  # v4.3.3