diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
index d09c2c6..1a9f9cc 100644
--- a/.github/workflows/dependabot.yml
+++ b/.github/workflows/dependabot.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
-      - uses: dependabot/fetch-metadata@v1
+      - uses: dependabot/fetch-metadata@v2
         id: metadata
         with: {github-token: "${{ secrets.GITHUB_TOKEN }}"}
 
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 935a732..14a9876 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -193,7 +193,7 @@ jobs: # Docs: <https://git.io/JvxXE>
           name: docker-image
           path: .artifact
 
-      - uses: aquasecurity/trivy-action@0.18.0 # action page: <https://github.com/aquasecurity/trivy-action>
+      - uses: aquasecurity/trivy-action@0.19.0 # action page: <https://github.com/aquasecurity/trivy-action>
         with:
           input: .artifact/docker-image.tar
           format: sarif