diff --git a/.github/workflows/rampart-nightly.yml b/.github/workflows/rampart-nightly.yml
index 40faae32..2680b5e1 100644
--- a/.github/workflows/rampart-nightly.yml
+++ b/.github/workflows/rampart-nightly.yml
@@ -36,7 +36,7 @@ jobs:
       - name: Scan — deps-osv
         id: deps_osv
         continue-on-error: true
-        uses: google/osv-scanner-action/osv-scanner-action@v2.3.8
+        uses: google/osv-scanner-action/osv-scanner-action@v2.5.1
         with: { scan-args: "--recursive --format json --output osv-report.json ." }
 
       - name: Gate — deps-osv
diff --git a/.github/workflows/rampart-pr.yml b/.github/workflows/rampart-pr.yml
index 3a5d0c5b..440b4571 100644
--- a/.github/workflows/rampart-pr.yml
+++ b/.github/workflows/rampart-pr.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: google/osv-scanner-action/osv-scanner-action@v2.3.8
+      - uses: google/osv-scanner-action/osv-scanner-action@v2.5.1
         continue-on-error: ${{ env.RAMPART_ENFORCE == 'warn' }}
         with: { scan-args: "--recursive --format json --output osv-report.json ." }
       - name: Gate on CVSS>=7