diff --git a/pkgs/by-name/sb/sbom-tool/deps.json b/pkgs/by-name/sb/sbom-tool/deps.json
index 3a536e95217f..50be4215a524 100644
--- a/pkgs/by-name/sb/sbom-tool/deps.json
+++ b/pkgs/by-name/sb/sbom-tool/deps.json
@@ -31,23 +31,23 @@
   },
   {
     "pname": "Microsoft.ComponentDetection.Common",
-    "version": "6.2.6",
-    "hash": "sha256-ItHNgemiRUciaYs17dwbUI+pawOl3ftfcEfo1QMc5oM="
+    "version": "6.3.0",
+    "hash": "sha256-P6AYdDTSWT7X16XSzH9YxbFESg0R8BndWMfsfLPhZ9I="
   },
   {
     "pname": "Microsoft.ComponentDetection.Contracts",
-    "version": "6.2.6",
-    "hash": "sha256-eAUYM3C2PJ9ERbiYDMqpnDcXGH8r80Y6WJ1xdBRYKME="
+    "version": "6.3.0",
+    "hash": "sha256-30RcpyFQ0LW/TlwTux8k+O+suuf9HPemyZ2LeCy+Nrw="
   },
   {
     "pname": "Microsoft.ComponentDetection.Detectors",
-    "version": "6.2.6",
-    "hash": "sha256-MkQQgeSWMlUJPKmFaCHpfFHwAW6IzQL+n4JJWtmLF24="
+    "version": "6.3.0",
+    "hash": "sha256-Ztg8wQHOnJjAKYRDJfXOmrndeDjplMRGMH4hdmZZehY="
   },
   {
     "pname": "Microsoft.ComponentDetection.Orchestrator",
-    "version": "6.2.6",
-    "hash": "sha256-BtX97RDa1MbMD1IhZ9QmKFL5eXKmzrDumPJXNwpHhcU="
+    "version": "6.3.0",
+    "hash": "sha256-vlB4uWMIVMgaPYYkHvDRR77DCxLQbNl6M0TQiDV6ZoE="
   },
   {
     "pname": "Microsoft.CSharp",
diff --git a/pkgs/by-name/sb/sbom-tool/package.nix b/pkgs/by-name/sb/sbom-tool/package.nix
index c3ff9d6e92f6..4b21ab9270c0 100644
--- a/pkgs/by-name/sb/sbom-tool/package.nix
+++ b/pkgs/by-name/sb/sbom-tool/package.nix
@@ -9,13 +9,13 @@
 
 buildDotnetModule rec {
   pname = "sbom-tool";
-  version = "4.1.7";
+  version = "4.1.8";
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "sbom-tool";
     tag = "v${version}";
-    hash = "sha256-Ls+IaqaWZOjEWvomV9q4JBdZkaevVtI6lCOG8l44AQM=";
+    hash = "sha256-nPZ1xBGUmcWaTrcCHVX1CLuEnhvkO2ifdIhrlwL/f9M=";
   };
 
   projectFile = "src/Microsoft.Sbom.Tool/Microsoft.Sbom.Tool.csproj";