diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 83f6ddc..890e79b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -98,7 +98,7 @@ jobs:
 
       # Fail the build on known HIGH/CRITICAL vulns and any leaked secrets.
       - name: Scan image (Trivy)
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
         with:
           image-ref: faishon-e-com:ci
           scanners: vuln,secret