diff --git a/.buildkite/pipeline.yaml b/.buildkite/pipeline.yaml
index e43233d34e..dfddbedf89 100644
--- a/.buildkite/pipeline.yaml
+++ b/.buildkite/pipeline.yaml
@@ -759,7 +759,7 @@ steps:
               push: false
               build-args:
                 - NAME=${APP_NAME}
-          - equinixmetal-buildkite/trivy#v1.19.0:
+          - equinixmetal-buildkite/trivy#v1.22.0:
               severity: CRITICAL,HIGH
               ignore-unfixed: true
               scanners: misconfig,secret,vuln