diff --git a/.github/workflows/secrets-and-sast-vendored.yml b/.github/workflows/secrets-and-sast-vendored.yml
index a30be38..8eea120 100644
--- a/.github/workflows/secrets-and-sast-vendored.yml
+++ b/.github/workflows/secrets-and-sast-vendored.yml
@@ -84,7 +84,7 @@ jobs:
         run: echo "key=$(date -u +%Y-%V)" >> "$GITHUB_OUTPUT"
 
       - name: Cache Trivy vulnerability database
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: ~/.cache/trivy
           key: trivy-db-v1-${{ steps.week.outputs.key }}