diff --git a/Earthfile b/Earthfile
index 7d2b454..ecc9a3d 100644
--- a/Earthfile
+++ b/Earthfile
@@ -8,7 +8,8 @@ ARG ISO_NAME=kairos-${VARIANT}-${FLAVOR}
 ARG LUET_VERSION=0.34.0
 ARG OS_ID=kairos
 ARG REPOSITORIES_FILE=framework-profile.yaml
-
+# renovate: datasource=docker depName=aquasec/trivy
+ARG TRIVY_VERSION=0.37.3
 ARG COSIGN_SKIP=".*quay.io/kairos/.*"
 
 IF [ "$FLAVOR" = "ubuntu" ]
@@ -522,7 +523,8 @@ datasource-iso:
 ### Security target scan
 ###
 trivy:
-    FROM aquasec/trivy
+    ARG TRIVY_VERSION
+    FROM aquasec/trivy:$TRIVY_VERSION
     SAVE ARTIFACT /contrib contrib
     SAVE ARTIFACT /usr/local/bin/trivy /trivy