diff --git a/.github/workflows/js.yaml b/.github/workflows/js.yaml
index 59d87b7a..26940a56 100644
--- a/.github/workflows/js.yaml
+++ b/.github/workflows/js.yaml
@@ -192,7 +192,7 @@ jobs:
       - uses: actions/checkout@v6
       - name: Run Trivy vulnerability scanner (for summary)
         # trivy-action v0.35.0 (safe version)
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25
         with:
           scan-type: fs
           scan-ref: .
@@ -217,7 +217,7 @@ jobs:
       # this comes as last or scan results won't be uploaded
       - name: Run Trivy vulnerability scanner (security treshold)
         # trivy-action v0.35.0 (safe version)
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25
         with:
           scan-type: fs
           scan-ref: .