diff --git a/security/trivy/Makefile b/security/trivy/Makefile
index a3a64eed48e0..5c9d2d8787e9 100644
--- a/security/trivy/Makefile
+++ b/security/trivy/Makefile
@@ -1,36 +1,40 @@
 PORTNAME=	trivy
 DISTVERSIONPREFIX=	v
-DISTVERSION=	0.66.0
-PORTREVISION=	1
+DISTVERSION=	0.67.2
 CATEGORIES=	security
 
 MAINTAINER=	mfechner@FreeBSD.org
 COMMENT=	Security scanner written in go
 WWW=		https://github.com/aquasecurity/trivy
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 BROKEN_i386=	not supported, see https://github.com/aquasecurity/trivy/pull/9102
 
-USES=		go:modules,1.24
+USES=		go:modules,1.25
 
+USE_GITHUB=	yes
+GH_ACCOUNT=	aquasecurity
+GH_PROJECT=	trivy
+GO_MOD_DIST=	github
 GO_MODULE=	github.com/aquasecurity/trivy
 GO_TARGET=	./cmd/trivy
 GO_BUILDFLAGS= -ldflags=" \
 		-extldflags '-static' \
 		-X github.com/aquasecurity/trivy/pkg/version.ver=${DISTVERSION} \
 		-s -w"
+MAKE_ENV=	GOEXPERIMENT=jsonv2
 
 PLIST_FILES=	bin/${PORTNAME}
 
 post-install:
 	@${MKDIR} ${STAGEDIR}${DATADIR}
 	${INSTALL_DATA} ${WRKSRC}/contrib/*.tpl ${STAGEDIR}${DATADIR}/
 	${FIND} -s ${STAGEDIR}${DATADIR} -not -type d | ${SORT} | \
 		${SED} -e 's#^${STAGEDIR}${PREFIX}/##' | \
 		${SED} -E -e '/sample$$/ s#^#@sample #; \
 		s#${DATADIR_REL}/bin#@(,,555) ${DATADIR_REL}/bin#; ' >> ${TMPPLIST}
 	cat ${TMPPLIST}
 
 .include <bsd.port.mk>
diff --git a/security/trivy/distinfo b/security/trivy/distinfo
index c7848514d223..28fde0ce1daa 100644
--- a/security/trivy/distinfo
+++ b/security/trivy/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1756878437
-SHA256 (go/security_trivy/trivy-v0.66.0/v0.66.0.mod) = 41bedcea560a0f606080b34320349b4c21d920aeadb0e57a81d5fcbc4cf58823
-SIZE (go/security_trivy/trivy-v0.66.0/v0.66.0.mod) = 25763
-SHA256 (go/security_trivy/trivy-v0.66.0/v0.66.0.zip) = 78fb7cca5602ee1927808488e3306a9d0d1ba26c4817ceff055d10ed04da9d1b
-SIZE (go/security_trivy/trivy-v0.66.0/v0.66.0.zip) = 59145292
+TIMESTAMP = 1760123985
+SHA256 (go/security_trivy/aquasecurity-trivy-v0.67.2_GH0/go.mod) = 130a0a0c893125dadbcc30ec66370aac6f848cc1b116a5d1acae4ceecb5a256d
+SIZE (go/security_trivy/aquasecurity-trivy-v0.67.2_GH0/go.mod) = 26741
+SHA256 (go/security_trivy/aquasecurity-trivy-v0.67.2_GH0/aquasecurity-trivy-v0.67.2_GH0.tar.gz) = 280ff8cfb17d05d6b4d1b07bdd3cd26971032301bedb3b800a14886e64ce75eb
+SIZE (go/security_trivy/aquasecurity-trivy-v0.67.2_GH0/aquasecurity-trivy-v0.67.2_GH0.tar.gz) = 57236343