diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index f4d8b104..dc7c60db 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -78,7 +78,7 @@ jobs:
           cache-to: type=gha,mode=max
 
       - name: Scan backend image with Trivy
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: finchippay-backend:scan
           format: sarif
@@ -132,7 +132,7 @@ jobs:
           cache-to: type=gha,mode=max
 
       - name: Scan frontend image with Trivy
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: finchippay-frontend:scan
           format: sarif
diff --git a/.github/workflows/kubernetes-deploy.yml b/.github/workflows/kubernetes-deploy.yml
index b6617796..be519b51 100644
--- a/.github/workflows/kubernetes-deploy.yml
+++ b/.github/workflows/kubernetes-deploy.yml
@@ -137,7 +137,7 @@ jobs:
 
       - name: Scan image with Trivy
         id: scan
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: ${{ matrix.component.name }}:scan
           format: sarif