diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 7b4fab0..abd7499 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -29,7 +29,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - run: docker build --build-arg NEXT_PUBLIC_API_URL=http://localhost:3000 -f apps/${{ matrix.service }}/Dockerfile -t voiceforge-${{ matrix.service }}:${{ github.sha }} .
-      - uses: aquasecurity/trivy-action@0.28.0
+      - uses: aquasecurity/trivy-action@v0.36.0
         with: { image-ref: "voiceforge-${{ matrix.service }}:${{ github.sha }}", format: sarif, output: "trivy-${{ matrix.service }}.sarif", severity: "CRITICAL,HIGH", exit-code: "1" }
       - uses: github/codeql-action/upload-sarif@v3
         if: always()