diff --git a/.github/workflows/push-pr-lint.yaml b/.github/workflows/push-pr-lint.yaml
index 64c688aa..9122db0a 100644
--- a/.github/workflows/push-pr-lint.yaml
+++ b/.github/workflows/push-pr-lint.yaml
@@ -38,7 +38,7 @@ jobs:
 
     - name: Scan image
       id: scan
-      uses: anchore/scan-action@v4
+      uses: anchore/scan-action@v6
       with:
         image: ghcr.io/equinixmetal/ironlib:latest
         acs-report-enable: true
diff --git a/.github/workflows/release-docker-image.yml b/.github/workflows/release-docker-image.yml
index 3f313a6b..18aabf4b 100644
--- a/.github/workflows/release-docker-image.yml
+++ b/.github/workflows/release-docker-image.yml
@@ -59,7 +59,7 @@ jobs:
 
       - name: Scan image
         id: scan
-        uses: anchore/scan-action@v4
+        uses: anchore/scan-action@v6
         with:
           image: ghcr.io/metal-toolbox/ironlib@${{ steps.dockerbuild.outputs.digest }}
           acs-report-enable: true