diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b346fc7ef0..68628f0a56 100755
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -404,7 +404,7 @@ jobs:
           merge-multiple: true
 
       - name: Scan for CVEs
-        uses: aquasecurity/trivy-action@0.26.0
+        uses: aquasecurity/trivy-action@0.72.0
         env:
           TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
         with:
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index 569fc6cb69..7c560d80ce 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -35,7 +35,7 @@ jobs:
         uses: actions/download-artifact@v4
 
       - name: Scan binaries
-        uses: aquasecurity/trivy-action@0.20.0
+        uses: aquasecurity/trivy-action@0.72.0
         with:
           scan-type: rootfs
           scan-ref: '.'