diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 086e61a..7a0e449 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -94,7 +94,7 @@ jobs:
           extra_args: --results=verified,unknown
 
       - name: osv-scanner (dependency CVEs)
-        uses: google/osv-scanner-action/osv-scanner-action@v2.6.0
+        uses: google/osv-scanner-action/osv-scanner-action@v2.7.0
         with:
           scan-args: |-
             --lockfile=bun.lock