diff --git a/action.yml b/action.yml
index f82c2ef..db4619c 100644
--- a/action.yml
+++ b/action.yml
@@ -32,7 +32,7 @@ runs:
         cosign-release: 'v2.2.2'
     - name: 'Generate SBOM'
       if: inputs.sbom == 'auto-generate-for-me-please.json'
-      uses: 'aquasecurity/trivy-action@2b6a709cf9c4025c5438138008beaddbb02086f0' # ratchet:aquasecurity/trivy-action@0.14.0
+      uses: 'aquasecurity/trivy-action@91713af97dc80187565512baba96e4364e983601' # ratchet:aquasecurity/trivy-action@0.16.0
       with:
         scan-type: 'image'
         format: 'cyclonedx'