diff --git a/.github/workflows/osv-scan.yml b/.github/workflows/osv-scan.yml
index 64b9f4a..2ac9a4c 100644
--- a/.github/workflows/osv-scan.yml
+++ b/.github/workflows/osv-scan.yml
@@ -48,6 +48,6 @@ jobs:
       - name: Resolve the dependency tree as an SBOM
         run: mvn -B -ntp org.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom
       - name: OSV scan
-        uses: google/osv-scanner-action/osv-scanner-action@9bb69575e74019c2ad085a1860787043adf47ccb # v2.2.4
+        uses: google/osv-scanner-action/osv-scanner-action@b1d267aea5211fa648d9d442fa64b90dbdcbdd36 # v2.7.0
         with:
           scan-args: -L target/bom.cdx.json