diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6e26b85f..49e1c32b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -43,6 +43,7 @@ jobs:
       packages: write
       security-events: write
     with:
+      scan_container: true
       push_dockerhub: true
       push_ghcr: true
     secrets:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index cbe6fb85..cbc131e2 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -38,6 +38,8 @@ jobs:
       tests: '["test:onchain","test:proxyless"]'
   build-docker:
     uses: digicatapult/shared-workflows/.github/workflows/build-docker.yml@main
+    with:
+      scan_container: true
     permissions:
       contents: read
       packages: write
diff --git a/package-lock.json b/package-lock.json
index 49975cf8..85557cff 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@digicatapult/sqnc-matchmaker-api",
-  "version": "6.2.137",
+  "version": "6.2.138",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@digicatapult/sqnc-matchmaker-api",
-      "version": "6.2.137",
+      "version": "6.2.138",
       "license": "Apache-2.0",
       "dependencies": {
         "@digicatapult/sqnc-process-management": "^3.0.107",
diff --git a/package.json b/package.json
index 33183c98..760d0a39 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@digicatapult/sqnc-matchmaker-api",
-  "version": "6.2.137",
+  "version": "6.2.138",
   "description": "An OpenAPI Matchmaking API service for SQNC",
   "main": "src/index.ts",
   "type": "module",