diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8d00b19..17fce2b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -104,7 +104,7 @@ jobs:
             -pv '${{ inputs.tag_name }}'.TrimStart('v') `
             -ps P4suta `
             -nsb https://github.com/P4suta/Snaply
-      - uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
+      - uses: taiki-e/install-action@7572810d7dd469b651bb7793945692cf78da5dd7 # v2.85.0
         with:
           tool: osv-scanner@2.3.6
       - name: Scan release SBOM
diff --git a/.github/workflows/sbom-monitor.yml b/.github/workflows/sbom-monitor.yml
index 8bff11f..2aa510f 100644
--- a/.github/workflows/sbom-monitor.yml
+++ b/.github/workflows/sbom-monitor.yml
@@ -29,7 +29,7 @@ jobs:
           gh release download "$tag" --pattern 'snaply.spdx.json' --dir sbom
           echo "available=true" >> "$GITHUB_OUTPUT"
           echo "tag=$tag" >> "$GITHUB_OUTPUT"
-      - uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
+      - uses: taiki-e/install-action@7572810d7dd469b651bb7793945692cf78da5dd7 # v2.85.0
         if: steps.release.outputs.available == 'true'
         with:
           tool: osv-scanner@2.3.6