diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 8e3ee8ea..0413c034 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
       - name: Run zizmor 🌈
         # see https://github.com/zizmorcore/zizmor-action
-        uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
+        uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3
         with:
           # advanced-security: false => emit findings as workflow-command annotations (::error file=…) rather than
           # uploading a SARIF report to GitHub's Security tab.
diff --git a/schema/bom-1.7.xsd b/schema/bom-1.7.xsd
index 59111cba..3d0a3564 100644
--- a/schema/bom-1.7.xsd
+++ b/schema/bom-1.7.xsd
@@ -8295,8 +8295,48 @@ limitations under the License.
                         </xs:element>
                         <xs:element name="cryptoRef" type="bom:refType" minOccurs="0" maxOccurs="unbounded">
                             <xs:annotation>
-                                <xs:documentation>A protocol-related cryptographic assets</xs:documentation>
+                                <xs:documentation>
+                                    DEPRECATED - DO NOT USE. This will be removed in a future version. Use `./relatedCryptographicAssets` instead.
+                                    A protocol-related cryptographic asset.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="relatedCryptographicAssets" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    A list of cryptographic assets related to this component.
+                                </xs:documentation>
                             </xs:annotation>
+                            <xs:complexType>
+                                <xs:sequence>
+                                    <xs:element name="relatedCryptographicAsset" minOccurs="0" maxOccurs="unbounded">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                A cryptographic asset related to this component.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:complexType>
+                                            <xs:sequence>
+                                                <xs:element name="type" type="xs:string" minOccurs="0" maxOccurs="1">
+                                                    <xs:annotation>
+                                                        <xs:documentation>
+                                                            Specifies the mechanism by which the cryptographic asset is secured by.
+                                                            Examples: "publicKey", "privateKey", "algorithm"
+                                                        </xs:documentation>
+                                                    </xs:annotation>
+                                                </xs:element>
+                                                <xs:element name="ref" type="bom:refType" minOccurs="0" maxOccurs="1">
+                                                    <xs:annotation>
+                                                        <xs:documentation>
+                                                            The bom-ref to cryptographic asset.
+                                                        </xs:documentation>
+                                                    </xs:annotation>
+                                                </xs:element>
+                                            </xs:sequence>
+                                        </xs:complexType>
+                                    </xs:element>
+                                </xs:sequence>
+                            </xs:complexType>
                         </xs:element>
                     </xs:sequence>
                 </xs:complexType>
diff --git a/tools/src/test/resources/1.7/valid-cryptography-full-1.7.json b/tools/src/test/resources/1.7/valid-cryptography-full-1.7.json
index d03b237e..a12f9eb1 100644
--- a/tools/src/test/resources/1.7/valid-cryptography-full-1.7.json
+++ b/tools/src/test/resources/1.7/valid-cryptography-full-1.7.json
@@ -239,7 +239,13 @@
                 "algorithm": "ecdsa_secp256r1_sha256"
               }
             ]
-          }
+          },
+          "relatedCryptographicAssets": [
+            {
+              "type": "publicKey",
+              "ref": "asset-4"
+            }
+          ]
         },
         "oid": "oid:1.3.6.1.5.5.7.3.1"
       }
diff --git a/tools/src/test/resources/1.7/valid-cryptography-full-1.7.textproto b/tools/src/test/resources/1.7/valid-cryptography-full-1.7.textproto
index 3552caf6..94909e43 100644
--- a/tools/src/test/resources/1.7/valid-cryptography-full-1.7.textproto
+++ b/tools/src/test/resources/1.7/valid-cryptography-full-1.7.textproto
@@ -231,6 +231,12 @@ components: {
           algorithm: "ecdsa_secp256r1_sha256"
         }
       }
+      relatedCryptographicAssets: {
+        assets: {
+          type: "publicKey"
+          ref: "asset-4"
+        }
+      }
     }
     oid: "oid:1.3.6.1.5.5.7.3.1"
   }
diff --git a/tools/src/test/resources/1.7/valid-cryptography-full-1.7.xml b/tools/src/test/resources/1.7/valid-cryptography-full-1.7.xml
index 7201e741..4685de3c 100644
--- a/tools/src/test/resources/1.7/valid-cryptography-full-1.7.xml
+++ b/tools/src/test/resources/1.7/valid-cryptography-full-1.7.xml
@@ -220,6 +220,12 @@
                             <algorithm>ecdsa_secp256r1_sha256</algorithm>
                         </auth>
                     </ikev2TransformTypes>
+                    <relatedCryptographicAssets>
+                        <relatedCryptographicAsset>
+                            <type>publicKey</type>
+                            <ref>asset-4</ref>
+                        </relatedCryptographicAsset>
+                    </relatedCryptographicAssets>
                 </protocolProperties>
                 <oid>oid:1.3.6.1.5.5.7.3.1</oid>
             </cryptoProperties>