diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
index 5d8255319..ad4e5a819 100644
--- a/.github/workflows/trivy.yaml
+++ b/.github/workflows/trivy.yaml
@@ -12,7 +12,7 @@ jobs:
       - name: Set up Go 1.x
         uses: actions/setup-go@v5
         with:
-          go-version: 1.23.1
+          go-version: 1.23.5
         id: go
 
       - name: Checkout code
diff --git a/.trivyignore b/.trivyignore
index bf6ad0ef3..263f61ce2 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -1,2 +1,2 @@
-CVE-2024-45337
-CVE-2024-45338
+CVE-2024-45336
+CVE-2024-45341
diff --git a/pkg/blobplugin/Dockerfile b/pkg/blobplugin/Dockerfile
index 4fca0c599..35289630e 100644
--- a/pkg/blobplugin/Dockerfile
+++ b/pkg/blobplugin/Dockerfile
@@ -32,7 +32,7 @@ RUN if [ "$ARCH" = "arm64" ]; then \
     fi
 
 # install azcopy
-RUN curl -Ls https://azcopyvnext-awgzd8g7aagqhzhe.b02.azurefd.net/releases/release-10.27.1-20241113/azcopy_linux_${ARCH}_10.27.1.tar.gz \
+RUN curl -Ls https://azcopyvnext-awgzd8g7aagqhzhe.b02.azurefd.net/releases/release-10.28.0-20250127/azcopy_linux_${ARCH}_10.28.0.tar.gz \
         | tar xvzf - --strip-components=1 -C /usr/local/bin/ --wildcards "*/azcopy"
 
 # download blobfuse deb
diff --git a/test/sanity/run-test.sh b/test/sanity/run-test.sh
index 8fa762b45..2fb9ad986 100755
--- a/test/sanity/run-test.sh
+++ b/test/sanity/run-test.sh
@@ -36,7 +36,7 @@ azcopyPath="/usr/local/bin/azcopy"
 if [ ! -f "$azcopyPath" ]; then
   azcopyTarFile="azcopy.tar.gz"
   echo 'Downloading azcopy...'
-  wget -O $azcopyTarFile azcopyvnext-awgzd8g7aagqhzhe.b02.azurefd.net/releases/release-10.27.1-20241113/azcopy_linux_amd64_10.27.1.tar.gz
+  wget -O $azcopyTarFile azcopyvnext-awgzd8g7aagqhzhe.b02.azurefd.net/releases/release-10.28.0-20250127/azcopy_linux_amd64_10.28.0.tar.gz
   tar -zxvf $azcopyTarFile
   mv ./azcopy*/azcopy /usr/local/bin/azcopy
   rm -rf ./$azcopyTarFile