diff --git a/.github/workflows/validate-charts.yml b/.github/workflows/validate-charts.yml
index a21f3c2..d203cbd 100644
--- a/.github/workflows/validate-charts.yml
+++ b/.github/workflows/validate-charts.yml
@@ -376,7 +376,7 @@ jobs:
         chart: ${{ fromJSON(needs.detect-changed-charts.outputs.scan-charts) }}
     env:
       # renovate: datasource=github-releases depName=aquasecurity/trivy
-      TRIVY_VERSION: v0.75.0
+      TRIVY_VERSION: v0.76.0
       # "report" always exits 0. Switch to "gate" to make a finding that no
       # documented exception covers fail the job - the intended step once the
       # seccomp gap (#84) is closed.