diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 0957251..2987597 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -66,7 +66,8 @@ jobs:
           exit-code: '0'
           vuln-type: 'os,library'
           severity: 'CRITICAL,HIGH'
-          format: 'sarif'
+          format: 'template'
+          template: '@/contrib/sarif.tpl'
           output: 'trivy-results.sarif'
           cache-dir: "./cache"
       ## Trivy-db uses `0600` permissions.