diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index 15ce7cca..072aa404 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -44,7 +44,7 @@ jobs:
           severity: 'HIGH,CRITICAL'
 
       - name: Post SBOM & Vulnerability Report to PR
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         if: ${{ github.event.workflow_run.pull_requests[0] != null }}
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}