diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 0f72666..b0a81e7 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -60,7 +60,7 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
       - uses: "actions/checkout@v3"
-      - uses: "aquasecurity/trivy-action@0.9.0"
+      - uses: "aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1" # v0.35.0
         with:
           scan-type: "fs"
           ignore-unfixed: true