diff --git a/.github/workflows/ai-bom-scan.yml b/.github/workflows/ai-bom-scan.yml
index 30aa451..ca65d79 100644
--- a/.github/workflows/ai-bom-scan.yml
+++ b/.github/workflows/ai-bom-scan.yml
@@ -122,7 +122,7 @@ jobs:
           PY
 
       - name: Post PR comment
-        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
+        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
         with:
           issue-number: ${{ github.event.pull_request.number }}
           body: ${{ steps.comment.outputs.body }}