diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 47439d5..3d939de 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -62,7 +62,7 @@ jobs:
           devspace run build --skip-push
 
       - name: run trivy - manager
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           image-ref: ghcr.io/srl-labs/clabernetes/clabernetes-manager:${{ env.COMMIT_HASH }}
           format: github
@@ -77,7 +77,7 @@ jobs:
       # we'll skip running this on that guy and just hit the manager/ui :)
 
       - name: run trivy - ui
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           image-ref: ghcr.io/srl-labs/clabernetes/clabernetes-ui:${{ env.COMMIT_HASH }}
           format: github
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 66845c2..8a038aa 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -48,7 +48,7 @@ jobs:
         run: make lint
 
       - name: run trivy - fs
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           scan-type: fs
           exit-code: 1