diff --git a/.github/workflows/call-trivy.yaml b/.github/workflows/call-trivy.yaml
index 5051c9c2..acf07787 100644
--- a/.github/workflows/call-trivy.yaml
+++ b/.github/workflows/call-trivy.yaml
@@ -44,19 +44,19 @@ jobs:
       # merge to one step
       # https://github.com/aquasecurity/trivy-action/issues/313
       - name: Scan agent
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           input: output/image/egressgateway-agent.tar
           severity: 'CRITICAL,HIGH'
 
       - name: Scan controller
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           input: output/image/egressgateway-controller.tar
           severity: 'CRITICAL,HIGH'
 
       - name: Scan nettools
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           input: output/image/egressgateway-nettools.tar
           severity: 'CRITICAL,HIGH'
\ No newline at end of file