diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c8dcb87..c084a3f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -84,7 +84,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Scan Dockerfiles with Trivy (misconfig)
-        uses: aquasecurity/trivy-action@v0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: fs
           scanners: misconfig
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 6ab1e14..b6816b9 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -77,7 +77,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Scan Dockerfiles with Trivy (misconfig)
-        uses: aquasecurity/trivy-action@v0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: fs
           scanners: misconfig
@@ -126,7 +126,7 @@ jobs:
           platforms: linux/amd64
 
       - name: Scan image with Trivy
-        uses: aquasecurity/trivy-action@v0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: ghcr.io/${{ github.repository_owner }}/vibe-ssh-relay:${{ steps.meta.outputs.version }}
           severity: CRITICAL
@@ -175,7 +175,7 @@ jobs:
           platforms: linux/amd64
 
       - name: Scan image with Trivy
-        uses: aquasecurity/trivy-action@v0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: ghcr.io/${{ github.repository_owner }}/vibe-dev-runner:${{ steps.meta.outputs.version }}
           severity: CRITICAL
@@ -243,7 +243,7 @@ jobs:
           IGNORE
 
       - name: Scan image with Trivy
-        uses: aquasecurity/trivy-action@v0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: ghcr.io/${{ github.repository_owner }}/paperclip-server:${{ steps.meta.outputs.version }}
           severity: CRITICAL