diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
index cb49984..d9de41c 100644
--- a/.github/workflows/workflow.yaml
+++ b/.github/workflows/workflow.yaml
@@ -354,7 +354,7 @@ jobs:
               print("TRIVYIGNORE_PATHS", ",".join(paths), sep="=", file=f)
 
       - name: Scan IaC code
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         id: trivy-scan
         with:
           exit-code: "0"
@@ -428,7 +428,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4.2.2
       - name: Submit SBOM results to Dependency Snapshots
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           scan-type: "fs"
           format: "github"