diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index 34f31f9..42f1ba1 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -19,7 +19,7 @@ jobs:
     name: Repo scan (vuln + secrets + config)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Trivy FS + Config scan (SARIF)
         uses: aquasecurity/trivy-action@v0.36.0
@@ -51,7 +51,7 @@ jobs:
     name: Generate SBOM
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Generate SBOM (CycloneDX)
         uses: aquasecurity/trivy-action@v0.36.0
@@ -73,7 +73,7 @@ jobs:
     #   name: Build + scan Docker image
     #   runs-on: ubuntu-latest
     #   steps:
-    #     - uses: actions/checkout@v6
+    #     - uses: actions/checkout@v7
 
     #     - name: Build Docker image
     #       run: docker build --build-arg CI=true -t lca-collaboration:poc .