diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index ba9157c..e61bc27 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -34,7 +34,7 @@ jobs:
           # action's 0.34.1 default (v0.69.1) was yanked: the git tag still
           # exists, so the installer reports "found version" and then 404s on
           # the missing release asset, failing the job deterministically.
-          version: 'v0.74.0'
+          version: 'v0.75.0'
 
       - name: Upload Trivy filesystem results to GitHub Security
         if: (success() || failure()) && github.event.pull_request.head.repo.full_name == github.repository