diff --git a/ci/setup-tools.sh b/ci/setup-tools.sh
index c24ca8de..fd4d6162 100644
--- a/ci/setup-tools.sh
+++ b/ci/setup-tools.sh
@@ -15,8 +15,8 @@ TRIVY_VERSION="${TRIVY_VERSION:-v0.71.1}"
 TRIVY_SHA256="${TRIVY_SHA256:-3cbae37cd440cd8676e5ce9207fe460b5641c7579a17e9d00f8894928c41a88d}"
 
 # renovate: datasource=github-release-attachments depName=google/osv-scanner
-OSV_SCANNER_VERSION="${OSV_SCANNER_VERSION:-v2.4.0}"
-OSV_SCANNER_SHA256="${OSV_SCANNER_SHA256:-15314940c10d26af9c6649f150b8a47c1262e8fc7e17b1d1029b0e479e8ed8a0}"
+OSV_SCANNER_VERSION="${OSV_SCANNER_VERSION:-v2.5.0}"
+OSV_SCANNER_SHA256="${OSV_SCANNER_SHA256:-edcfc41d257db36148f065055655fe3fcfc434b0b423ea67468a84c207524e0c}"
 
 # renovate: datasource=github-release-attachments depName=opengrep/opengrep
 OPENGREP_VERSION="${OPENGREP_VERSION:-v1.25.0}"