diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml
index 124c2a86f9..a5eb19771b 100644
--- a/.github/workflows/security-audit.yml
+++ b/.github/workflows/security-audit.yml
@@ -409,7 +409,7 @@ jobs:
       # ─────────────────────────────────────────────────────────────
       - name: Trivy (filesystem CVE + IaC misconfig)
         continue-on-error: true
-        uses: aquasecurity/trivy-action@0.36.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: fs
           scan-ref: .