diff --git a/.github/workflows/osv-scanner-full-reusable.yml b/.github/workflows/osv-scanner-full-reusable.yml
index 3d7f2b6..a095984 100644
--- a/.github/workflows/osv-scanner-full-reusable.yml
+++ b/.github/workflows/osv-scanner-full-reusable.yml
@@ -72,7 +72,7 @@ jobs:
           path: ./
 
       - name: Run scanner
-        uses: google/osv-scanner-action/osv-scanner-action@9a498708959aeaef5ef730655706c5a1df1edbc2 # v2.3.8
+        uses: google/osv-scanner-action/osv-scanner-action@8deb546fdb875b9996d27d4950be7312dac076a1 # v2.5.0
         continue-on-error: true
         with:
           scan-args: |-
diff --git a/.github/workflows/osv-scanner-pr-reusable.yml b/.github/workflows/osv-scanner-pr-reusable.yml
index baae90d..4a009d1 100644
--- a/.github/workflows/osv-scanner-pr-reusable.yml
+++ b/.github/workflows/osv-scanner-pr-reusable.yml
@@ -59,7 +59,7 @@ jobs:
           git submodule update --recursive
 
       - name: Run scanner on base branch
-        uses: google/osv-scanner-action/osv-scanner-action@9a498708959aeaef5ef730655706c5a1df1edbc2 # v2.3.8
+        uses: google/osv-scanner-action/osv-scanner-action@8deb546fdb875b9996d27d4950be7312dac076a1 # v2.5.0
         continue-on-error: true
         with:
           scan-args: |-
@@ -73,7 +73,7 @@ jobs:
           git submodule update --recursive
 
       - name: Run scanner on PR branch
-        uses: google/osv-scanner-action/osv-scanner-action@9a498708959aeaef5ef730655706c5a1df1edbc2 # v2.3.8
+        uses: google/osv-scanner-action/osv-scanner-action@8deb546fdb875b9996d27d4950be7312dac076a1 # v2.5.0
         continue-on-error: true
         with:
           scan-args: |-