diff --git a/.gitea/workflows/trivy-scan.yml b/.gitea/workflows/trivy-scan.yml
index 2509363..02fc320 100644
--- a/.gitea/workflows/trivy-scan.yml
+++ b/.gitea/workflows/trivy-scan.yml
@@ -18,7 +18,7 @@ jobs:
         run: |
           docker run --rm \
             --volumes-from "$HOSTNAME" \
-            aquasec/trivy:latest \
+            aquasec/trivy:0.69.3@sha256:bcc376de8d77cfe086a917230e818dc9f8528e3c852f7b1aff648949b6258d1c \
             fs /workspace/guardutils/mirro \
               --scanners vuln \
               --pkg-types library \