diff --git a/.github/workflows/grype.yml b/.github/workflows/grype.yml
index aef38be4ef..15845b3d5b 100644
--- a/.github/workflows/grype.yml
+++ b/.github/workflows/grype.yml
@@ -38,7 +38,7 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-go-
     - name: Scan current project
-      uses: anchore/scan-action@3343887d815d7b07465f6fdcd395bd66508d486a # v3.6.4
+      uses: anchore/scan-action@d43cc1dfea6a99ed123bf8f3133f1797c9b44492 # v4.1.0
       with:
         path: "."
         fail-build: true