diff --git a/.github/workflows/supply-chain.yml b/.github/workflows/supply-chain.yml
index b9290b1..f04b707 100644
--- a/.github/workflows/supply-chain.yml
+++ b/.github/workflows/supply-chain.yml
@@ -148,7 +148,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # pin v4.2.2
 
       - name: Trivy config scan (Dockerfile)
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1  # pin v0.35.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25  # pin v0.36.0
         with:
           scan-type: 'config'
           scan-ref: 'cli/Dockerfile'