diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6c27a29..6c1cfac 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -52,7 +52,7 @@ jobs:
           ghcr.io/${{ github.repository }}:${{ env.TAG }}
 
     - name: trivy image scan
-      uses: aquasecurity/trivy-action@0.27.0
+      uses: aquasecurity/trivy-action@0.28.0
       with:
         image-ref: ${{ github.repository }}:latest
         exit-code: 0