diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 86110d6..4f30e2d 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -209,7 +209,7 @@ jobs:
       - name: Install project (locked)
         run: uv sync --frozen
       - name: Trivy filesystem scan (SARIF)
-        uses: aquasecurity/trivy-action@0.33.1
+        uses: aquasecurity/trivy-action@0.34.0
         with:
           scan-type: "fs"
           scan-ref: "."
@@ -225,7 +225,7 @@ jobs:
       - name: Build container image (local)
         run: docker build -t mcp-devbench:test .
       - name: Trivy container scan (SARIF)
-        uses: aquasecurity/trivy-action@0.33.1
+        uses: aquasecurity/trivy-action@0.34.0
         with:
           image-ref: "mcp-devbench:test"
           severity: "HIGH,CRITICAL"