diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d3a7840..0794413 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -50,7 +50,7 @@ jobs:
           docker logs api-nyaa-ci
           exit 1
       - name: Trivy image scan
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # safe v0.35.0 / Trivy 0.69.3
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # safe v0.35.0 / Trivy 0.69.3
         with:
           image-ref: api-nyaa:ci
           version: v0.69.3
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 32ffc1f..67063b6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -17,7 +17,7 @@ jobs:
       - name: Build scan candidate
         run: docker build --tag api-nyaa:release-candidate .
       - name: Trivy image scan
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # safe v0.35.0 / Trivy 0.69.3
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # safe v0.35.0 / Trivy 0.69.3
         with:
           image-ref: api-nyaa:release-candidate
           version: v0.69.3