diff --git a/.github/workflows/release-gate.yml b/.github/workflows/release-gate.yml
index 43c6ec5..6a279c9 100644
--- a/.github/workflows/release-gate.yml
+++ b/.github/workflows/release-gate.yml
@@ -346,7 +346,7 @@ jobs:
         run: docker load < /tmp/docling-studio-${{ matrix.target }}.tar.gz
 
       - name: Run Trivy — CRITICAL (blocking)
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.35.0
         with:
           image-ref: docling-studio:${{ matrix.target }}
           format: table
@@ -356,7 +356,7 @@ jobs:
 
       - name: Run Trivy — HIGH (informational)
         if: always()
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.35.0
         with:
           image-ref: docling-studio:${{ matrix.target }}
           format: table