diff --git a/.github/workflows/osv-scanner-pr.yml b/.github/workflows/osv-scanner-pr.yml
index 4951186..d1b295e 100644
--- a/.github/workflows/osv-scanner-pr.yml
+++ b/.github/workflows/osv-scanner-pr.yml
@@ -18,4 +18,4 @@ permissions:
 
 jobs:
   scan-pr:
-    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.8
\ No newline at end of file
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.5.0
\ No newline at end of file
diff --git a/.github/workflows/osv-scanner-release.yml b/.github/workflows/osv-scanner-release.yml
index d543db9..361f261 100644
--- a/.github/workflows/osv-scanner-release.yml
+++ b/.github/workflows/osv-scanner-release.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   osv-scan:
-    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.8"
+    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.5.0"
     with:
       # Recursive scan supports multiple ecosystems:
       # Go, Node.js, Python, Rust, Java, etc.