diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
new file mode 100644
index 0000000..46344a8
--- /dev/null
+++ b/.github/workflows/stale.yml
@@ -0,0 +1,13 @@
+name: Close stale issues and PRs
+on:
+  schedule:
+    - cron: 00 02 * * *
+
+permissions:
+  issues: write
+  pull-requests: write
+
+jobs:
+  stale:
+    name: Stale
+    uses: dgraph-io/.github/.github/workflows/stale.yml@main
diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml
index 9eb69fb..5a3a56e 100644
--- a/.trunk/trunk.yaml
+++ b/.trunk/trunk.yaml
@@ -35,7 +35,7 @@ lint:
         - "**/*.html"
         - "**/*.json"
   enabled:
-    - trivy@0.61.0
+    - trivy@0.71.2
     - actionlint@1.7.7
     - checkov@3.2.396
     - git-diff-check