diff --git a/.github/workflows/open-pr.yml b/.github/workflows/open-pr.yml
index 3824c3e..7bd0c11 100644
--- a/.github/workflows/open-pr.yml
+++ b/.github/workflows/open-pr.yml
@@ -72,7 +72,7 @@ jobs:
           docker images
       - name: Docker Scout
         id: docker-scout
-        uses: docker/scout-action@a4119c5a8c5076236a54e4ce99531f7e4dd2ef84 # v1.27.0
+        uses: docker/scout-action@4bbf17a9da65a7b5497361bb407e88cc9548f69c # v1.28.0
         with:
           command: compare
           image: local://${{ env.WORKLOAD_NAME }}:pr-${{ github.event.number }}
diff --git a/.github/workflows/push-tag.yml b/.github/workflows/push-tag.yml
index b92388c..9e0163e 100644
--- a/.github/workflows/push-tag.yml
+++ b/.github/workflows/push-tag.yml
@@ -53,7 +53,7 @@ jobs:
           password: ${{ secrets.DOCKER_PAT }}
       - name: Docker Scout
         id: docker-scout
-        uses: docker/scout-action@a4119c5a8c5076236a54e4ce99531f7e4dd2ef84 # v1.27.0
+        uses: docker/scout-action@4bbf17a9da65a7b5497361bb407e88cc9548f69c # v1.28.0
         with:
           command: cves
           sarif-file: sarif.output.json