diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index 82041d131c6..118c7d982fe 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -22,7 +22,7 @@ jobs:
       # For some reason with workflow_run.id, download-artifact does not work.
       # Github Docs explicity provide an example of using github-script to download artifacts.
       - name: 'Download artifact'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({
diff --git a/.github/workflows/trivy-trigger.yml b/.github/workflows/trivy-trigger.yml
index fe9636d9950..2ca053d8bc8 100644
--- a/.github/workflows/trivy-trigger.yml
+++ b/.github/workflows/trivy-trigger.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Verify actor is a member of k3s-io organization and has write permissions
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const org = 'k3s-io';