diff --git a/.github/workflows/mirror-trivy-db.yaml b/.github/workflows/mirror-trivy-db.yaml
index 9d31ee3..af42cd5 100644
--- a/.github/workflows/mirror-trivy-db.yaml
+++ b/.github/workflows/mirror-trivy-db.yaml
@@ -59,7 +59,7 @@ jobs:
       matrix: ${{ fromJson(needs.resolve.outputs.matrix) }}
     steps:
       - name: Install oras
-        uses: oras-project/setup-oras@v1
+        uses: oras-project/setup-oras@v2
         with:
           version: 1.2.2