diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1617b27d..bda790a8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -582,7 +582,7 @@ jobs:
           )
           PY
       - name: Scan whole production image
-        uses: anchore/scan-action@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2 # v7.4.0
+        uses: anchore/scan-action@27805bf3b4e84b4a5c980df22ed233c00390a439 # v7.4.2
         with:
           image: engraphis:release
           fail-build: false