diff --git a/.github/scripts/conformance-client.py b/.github/scripts/conformance-client.py
index 1f80ad6ce7..eb785bca3a 100755
--- a/.github/scripts/conformance-client.py
+++ b/.github/scripts/conformance-client.py
@@ -10,8 +10,20 @@
 import shutil
 import sys
 
+from securesystemslib.signer import KEY_FOR_TYPE_AND_SCHEME, SSlibKey
+
 from tuf.ngclient import Updater
 
+# ML-DSA is not in securesystemslib default verifiers yet in v1.5.0:
+# enable it in the conformance client
+KEY_FOR_TYPE_AND_SCHEME.update(
+    {
+        ("ml-dsa", "ml-dsa-44/1"): SSlibKey,
+        ("ml-dsa", "ml-dsa-65/1"): SSlibKey,
+        ("ml-dsa", "ml-dsa-87/1"): SSlibKey,
+    }
+)
+
 
 def init(metadata_dir: str, trusted_root: str) -> None:
     """Initialize local trusted metadata"""
diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml
index 86b5febc38..48eba9a4d7 100644
--- a/.github/workflows/conformance.yml
+++ b/.github/workflows/conformance.yml
@@ -21,6 +21,6 @@ jobs:
           persist-credentials: false
 
       - name: Run test suite
-        uses: theupdateframework/tuf-conformance@500c525c9ce287a472fd334fe8d885cace667d32 # v2.4.0
+        uses: theupdateframework/tuf-conformance@1bc18916ee35f753b6eb8ee19dabb98449ca7326 # v2.5.0
         with:
           entrypoint: ".github/scripts/conformance-client.py"