diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 49521d0..eded489 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -93,7 +93,7 @@ jobs:
           sarif_file: 'trivy-results.sarif'
 
       - name: Run the Anchore scan action
-        uses: anchore/scan-action@v5
+        uses: anchore/scan-action@v6
         id: anchore-scan
         with:
           image: '${{ env.IMAGE_NAME }}:${{ env.TEST_TAG }}'
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index 7d4bc90..87bff00 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -38,7 +38,7 @@ jobs:
           sarif_file: 'trivy-results.sarif'
 
       - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled
-        uses: anchore/scan-action@v5
+        uses: anchore/scan-action@v6
         with:
           image: ${{ env.IMAGE }}
           output-format: sarif
diff --git a/.github/workflows/test-pr.yml b/.github/workflows/test-pr.yml
index 61a8cd3..c336ff4 100644
--- a/.github/workflows/test-pr.yml
+++ b/.github/workflows/test-pr.yml
@@ -53,7 +53,7 @@ jobs:
           TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
 
       - name: Run the Anchore scan action for PR
-        uses: anchore/scan-action@v5
+        uses: anchore/scan-action@v6
         id: anchore-scan-pr
         with:
           image: '${{ env.IMAGE_NAME }}:${{ github.sha }}'