diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 1d8df92f..4c7714c1 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -63,6 +63,6 @@ jobs:
       # this job via its exit code; grant `checks: write` + drop this only if you
       # want inline PR annotations (and the extra check-run) back.
       - name: Trunk Check
-        uses: trunk-io/trunk-action@04ba50e7658c81db7356da96657e6e77f220bfa3 # v1.3.1
+        uses: trunk-io/trunk-action@e1234e67a86010d61ddac8d8ebf4b783e2ffd2fa # v2.0.0
         with:
           save-annotations: true
diff --git a/.github/workflows/trunk-upgrade.yml b/.github/workflows/trunk-upgrade.yml
index 8ca8e177..4bb9d299 100644
--- a/.github/workflows/trunk-upgrade.yml
+++ b/.github/workflows/trunk-upgrade.yml
@@ -18,7 +18,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install Trunk CLI
-        uses: trunk-io/trunk-action@04ba50e7658c81db7356da96657e6e77f220bfa3 # v1.3.1
+        uses: trunk-io/trunk-action@e1234e67a86010d61ddac8d8ebf4b783e2ffd2fa # v2.0.0
 
       - name: Upgrade Trunk CLI and linters
         run: '"${TRUNK_PATH}" upgrade -y --include-cli'