diff --git a/.github/workflows/mini-baas-security.yml b/.github/workflows/mini-baas-security.yml
index 7318a5f5..fb2939aa 100644
--- a/.github/workflows/mini-baas-security.yml
+++ b/.github/workflows/mini-baas-security.yml
@@ -163,7 +163,7 @@ jobs:
 
       - name: Trivy filesystem scan
 
-        uses: aquasecurity/trivy-action@8f28faec26515256b6d22074d1d2a8986f4cbd87 # master at 2026-11-04
+        uses: aquasecurity/trivy-action@38b337fff0a2f984d5be173c99e3f633438167ec # master at 2026-11-04
 
         with:
           scan-type: fs
@@ -210,7 +210,7 @@ jobs:
       - name: Trivy image scan
         if: steps.build_img.outcome == 'success'
 
-        uses: aquasecurity/trivy-action@8f28faec26515256b6d22074d1d2a8986f4cbd87 # master at 2026-11-04
+        uses: aquasecurity/trivy-action@38b337fff0a2f984d5be173c99e3f633438167ec # master at 2026-11-04
 
         with:
           image-ref: mini-baas/query-router:ci