diff --git a/updatecli/updatecli.d/trivy.yaml b/updatecli/updatecli.d/trivy.yaml
index f6fae4055322..ddab63f11394 100644
--- a/updatecli/updatecli.d/trivy.yaml
+++ b/updatecli/updatecli.d/trivy.yaml
@@ -35,7 +35,8 @@ sources:
       repository: "trivy"
       token: "{{ requiredEnv .github.token }}"
       versionfilter:
-        kind: "latest"
+        kind: "regex"
+        pattern: "^v\\d+\\.\\d+$" # Matches "vMajor.Minor" only, skip patch
     transformers:
       - trimprefix: "v"