diff --git a/trivy.yaml b/trivy.yaml
index 04548bcdf6d..cdff7b80976 100644
--- a/trivy.yaml
+++ b/trivy.yaml
@@ -1,7 +1,7 @@
 package:
   name: trivy
   version: "0.64.1"
-  epoch: 2
+  epoch: 3 # GHSA-x4rx-4gw3-53p4
   description: Simple and comprehensive vulnerability scanner for containers
   copyright:
     - license: Apache-2.0
@@ -17,6 +17,7 @@ pipeline:
     with:
       deps: |-
         helm.sh/helm/v3@v3.18.4
+        github.com/docker/docker@v28.3.3+incompatible
 
   - uses: go/build
     with: