diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index cc003bf..cbcbb54 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -53,7 +53,7 @@ jobs:
       actions: read
       security-events: write # For Security Tab
       contents: read
-    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.3.8"
+    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.5.0"
     with:
       # Explicit root scanning
       scan-args: |-