diff --git a/.github/workflows/analysis.yml b/.github/workflows/analysis.yml
index 12f4cc1..711c38c 100644
--- a/.github/workflows/analysis.yml
+++ b/.github/workflows/analysis.yml
@@ -33,7 +33,7 @@ jobs:
           name: ${{ matrix.variant }}-image
 
       - name: Run Trivy scanner
-        uses: aquasecurity/trivy-action@0.17.0
+        uses: aquasecurity/trivy-action@0.18.0
         if: inputs.artifact
         with:
           input: container-image.tar
@@ -42,7 +42,7 @@ jobs:
           output: results.sarif
 
       - name: Run Trivy scanner
-        uses: aquasecurity/trivy-action@0.17.0
+        uses: aquasecurity/trivy-action@0.18.0
         if: "! inputs.artifact"
         with:
           image-ref: ghcr.io/${{ vars.REGISTRY_IMAGE }}:${{ matrix.variant }}