diff --git a/action.yml b/action.yml
index 7af99bc..b7f9d5c 100644
--- a/action.yml
+++ b/action.yml
@@ -32,7 +32,7 @@ runs:
         cosign-release: 'v2.2.1'
     - name: 'Generate SBOM'
       if: inputs.sbom == 'auto-generate-for-me-please.json'
-      uses: 'aquasecurity/trivy-action@f78e9ecf42a1271402d4f484518b9313235990e1' # ratchet:aquasecurity/trivy-action@0.13.1
+      uses: 'aquasecurity/trivy-action@2b6a709cf9c4025c5438138008beaddbb02086f0' # ratchet:aquasecurity/trivy-action@0.14.0
       with:
         scan-type: 'image'
         format: 'cyclonedx'