diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 506041d..cc5042a 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -108,7 +108,7 @@ jobs:
           provenance: true
 
       - name: Trivy vulnerability scan
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: ${{ env.IMAGE_PREFIX }}/${{ matrix.service.name }}@${{ steps.build.outputs.digest }}
           format: sarif
@@ -189,7 +189,7 @@ jobs:
   # kubeconfig secret. No-ops safely until 5.2 secrets exist in the cluster.
   # ============================================================================
   deploy:
-    name: Deploy (${{ github.event.inputs.environment || 'production' }})
+    name: Deploy
     runs-on: ubuntu-latest
     needs: build-and-push
     environment: