diff --git a/.github/workflows/hosted-ci-images-release.yml b/.github/workflows/hosted-ci-images-release.yml
index 3ff9705..747578b 100644
--- a/.github/workflows/hosted-ci-images-release.yml
+++ b/.github/workflows/hosted-ci-images-release.yml
@@ -59,7 +59,7 @@ jobs:
           sbom: true
           push: true
       - name: Scan exact digest
-        uses: aquasecurity/trivy-action@c07df6fec6fa692e6fd1200d50aaa1fdd66f03c8
+        uses: aquasecurity/trivy-action@d2a0b60797ff03db6132bd4e2b293f9b37081297
         with:
           image-ref: ${{ inputs.registry }}/${{ inputs.image-prefix }}-${{ matrix.profile }}@${{ steps.build.outputs.digest }}
           format: table
diff --git a/.github/workflows/hosted-container-release.yml b/.github/workflows/hosted-container-release.yml
index 2aa224f..96cfa7a 100644
--- a/.github/workflows/hosted-container-release.yml
+++ b/.github/workflows/hosted-container-release.yml
@@ -83,7 +83,7 @@ jobs:
           IMAGE_REF: ${{ inputs.image }}@${{ steps.build.outputs.digest }}
         run: bash -euo pipefail -c "$COMMAND"
       - name: Scan exact digest
-        uses: aquasecurity/trivy-action@c07df6fec6fa692e6fd1200d50aaa1fdd66f03c8
+        uses: aquasecurity/trivy-action@d2a0b60797ff03db6132bd4e2b293f9b37081297
         with:
           image-ref: ${{ inputs.image }}@${{ steps.build.outputs.digest }}
           format: table