diff --git a/test/python/Dockerfile b/test/python/Dockerfile
index 7182d06dd0..c063fd4db6 100644
--- a/test/python/Dockerfile
+++ b/test/python/Dockerfile
@@ -187,7 +187,7 @@ RUN set -ex \
 
 
 # renovate: datasource=pypi
-RUN install-tool checkov 3.1.20
+RUN install-tool checkov 3.1.31
 
 #--------------------------------------
 # test pipenv-b: pipenv (multiple python)
diff --git a/test/python/Dockerfile.arm64 b/test/python/Dockerfile.arm64
index e3eee2cbd1..f0a879b791 100644
--- a/test/python/Dockerfile.arm64
+++ b/test/python/Dockerfile.arm64
@@ -30,7 +30,7 @@ RUN install-tool python 3.12.1
 FROM test-python as test-checkov
 
 # renovate: datasource=pypi
-RUN install-tool checkov 3.1.20
+RUN install-tool checkov 3.1.31
 
 #--------------------------------------
 # Image: hashin