diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
index 20f0e4615b..903c129a1e 100644
--- a/.github/workflows/trivy.yaml
+++ b/.github/workflows/trivy.yaml
@@ -53,7 +53,7 @@ jobs:
       run: curl -fsSO https://raw.githubusercontent.com/rancher/vexhub/refs/heads/main/reports/rancher.openvex.json
 
     - name: Run Trivy on image
-      uses: aquasecurity/trivy-action@0.27.0
+      uses: aquasecurity/trivy-action@0.28.0
       with:
         image-ref: '${{ steps.build-image.outputs.TAG }}'
         format: 'table'
@@ -64,7 +64,7 @@ jobs:
         TRIVY_SHOW_SUPPRESSED: true
     
     - name: Run Trivy on filesystem
-      uses: aquasecurity/trivy-action@0.27.0
+      uses: aquasecurity/trivy-action@0.28.0
       with:
         scan-type: 'fs'
         scan-ref: '.'