diff --git a/.github/workflows/trivy-license.yml b/.github/workflows/trivy-license.yml
index 4794f39..6fb043f 100644
--- a/.github/workflows/trivy-license.yml
+++ b/.github/workflows/trivy-license.yml
@@ -48,7 +48,7 @@ jobs:
           persist-credentials: false
 
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
+        uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # 0.28.0
         with:
           scan-type: fs
           format: sarif
diff --git a/.github/workflows/trivy-vuln.yml b/.github/workflows/trivy-vuln.yml
index b3c84df..5e4b256 100644
--- a/.github/workflows/trivy-vuln.yml
+++ b/.github/workflows/trivy-vuln.yml
@@ -48,7 +48,7 @@ jobs:
           persist-credentials: false
 
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
+        uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # 0.28.0
         with:
           scan-type: fs
           format: sarif