diff --git a/.github/workflows/qualify.yml b/.github/workflows/qualify.yml
index b547289..95519de 100644
--- a/.github/workflows/qualify.yml
+++ b/.github/workflows/qualify.yml
@@ -1,4 +1,4 @@
-name: SpecCursor Quality Gates
+name: SpecCursor Quality Gates
 
 # Honest qualification suite aligned to repository reality.
 # What exists today: Node apps/packages (pnpm), optional Rust worker,
@@ -215,7 +215,7 @@ jobs:
           fi
           npx snyk test --severity-threshold=high
       - name: Trivy filesystem scan
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: fs
           scan-ref: .