diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 414d27e..aeabf82 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -91,7 +91,7 @@ jobs:
       - name: Build Railway image for scan
         run: docker build -f Dockerfile.railway -t pic-api:scan .
       - name: Scan image with Trivy
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # 0.36.0
         with:
           image-ref: pic-api:scan
           format: table
diff --git a/.github/workflows/deploy-staging.yml b/.github/workflows/deploy-staging.yml
index 4c58a43..5f363fc 100644
--- a/.github/workflows/deploy-staging.yml
+++ b/.github/workflows/deploy-staging.yml
@@ -45,7 +45,7 @@ jobs:
       - name: Build Railway image for scan
         run: docker build -f Dockerfile.railway -t pic-api:scan .
       - name: Scan image with Trivy
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # 0.36.0
         with:
           image-ref: pic-api:scan
           format: table