diff --git a/_service b/_service
index 6e6d5c4..e206ff5 100644
--- a/_service
+++ b/_service
@@ -2,7 +2,7 @@
   <service name="tar_scm" mode="disabled">
     <param name="url">https://github.com/aquasecurity/trivy</param>
     <param name="scm">git</param>
-    <param name="revision">v0.38.1</param>
+    <param name="revision">v0.38.2</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>
diff --git a/_servicedata b/_servicedata
index 1921c75..d92a715 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/aquasecurity/trivy</param>
-              <param name="changesrevision">497c955a4bbe69021452c816e3133594919727fd</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">800473a8bcd36b8ec83eeb643e01e4822c5fe712</param></service></servicedata>
\ No newline at end of file
diff --git a/trivy-0.38.1.tar.zst b/trivy-0.38.1.tar.zst
deleted file mode 100644
index cf490af..0000000
--- a/trivy-0.38.1.tar.zst
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:295561b42d8d1850e43dd27f46ae4c263e6d568f159a15e7bd148c4295d19da5
-size 44709679
diff --git a/trivy-0.38.2.tar.zst b/trivy-0.38.2.tar.zst
new file mode 100644
index 0000000..fd6e27d
--- /dev/null
+++ b/trivy-0.38.2.tar.zst
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e02ccc6dd939af3ece6781705432f60b62c26e160001f8231bbc24158e388fb1
+size 44709540
diff --git a/trivy.changes b/trivy.changes
index eec0b5e..f01b6d3 100644
--- a/trivy.changes
+++ b/trivy.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Wed Mar 08 11:02:13 UTC 2023 - dmueller@suse.com
+
+- Update to version 0.38.2:
+  * chore(deps): bump github.com/moby/buildkit from 0.11.0 to 0.11.4 (#3789)
+  * chore(deps): bump actions/add-to-project from 0.4.0 to 0.4.1 (#3724)
+  * fix(license): disable jar analyzer for licence scan only (#3780)
+  * bump trivy-issue-action to v0.0.0; skip `pkg` dir (#3781)
+  * fix: skip checking dirs for required post-analyzers (#3773)
+  * docs: add information about plugin format (#3749)
+  * fix(sbom): add trivy version to spdx creators tool field (#3756)
+
 -------------------------------------------------------------------
 Thu Mar 02 17:30:50 UTC 2023 - dmueller@suse.com
 
diff --git a/trivy.spec b/trivy.spec
index 16e14b7..22eccbd 100644
--- a/trivy.spec
+++ b/trivy.spec
@@ -19,7 +19,7 @@
 
 %global goipath github.com/aquasecurity/trivy
 Name:           trivy
-Version:        0.38.1
+Version:        0.38.2
 Release:        0
 Summary:        A Simple and Comprehensive Vulnerability Scanner for Containers
 License:        Apache-2.0
diff --git a/vendor.tar.zst b/vendor.tar.zst
index 82f5ba3..e3ac36e 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:57ff9df21233a38ec71167aecb9557f6bea26828c7f9a4936d8c1bb020425be7
-size 41778005
+oid sha256:96792a768276d2d9c0832f05696b1dbbf386e98b52f633e8ad956b166c57815f
+size 41282728