diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index e04e9e11..61326963 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -151,7 +151,7 @@ jobs:
         run: mkdir -p "$SECURITY_REPORT_DIR"
 
       - name: Scan container image for vulnerable OS packages
-        uses: aquasecurity/trivy-action@0.30.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: subtrackr-api:${{ github.sha }}
           format: json
@@ -160,7 +160,7 @@ jobs:
           exit-code: '0'
 
       - name: Scan Dockerfile and IaC configuration
-        uses: aquasecurity/trivy-action@0.30.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: config
           scan-ref: .