diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 4113022..cfe598f 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -26,7 +26,7 @@ jobs:
 
       - name: Install dependencies
         run: |
-          python -m pip install --upgrade pip
+          python -m pip install --upgrade pip "setuptools>=83.0.0"
           python -m pip install -e .[dev]
 
       - name: Security checks (bandit)
@@ -50,7 +50,7 @@ jobs:
 
       - name: Upload Trivy results to GitHub Security
         uses: github/codeql-action/upload-sarif@v4
-        if: always()
+        if: ${{ always() && hashFiles('trivy-results.sarif') != '' }}
         with:
           sarif_file: 'trivy-results.sarif'
           wait-for-processing: false
diff --git a/pyproject.toml b/pyproject.toml
index 70aeeb5..0bf15f4 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,5 +1,5 @@
 [build-system]
-requires = ["setuptools>=68"]
+requires = ["setuptools>=83.0.0"]
 build-backend = "setuptools.build_meta"
 
 [project]
@@ -20,7 +20,7 @@ dependencies = [
     "pydantic-settings>=2.2.0",
     "python-dotenv>=1.0.1",
     "Pillow>=10.4.0",
-    "mindee>=4.27.0",
+    "mindee>=4.27.0,<5.0.0",
     "requests>=2.31.0",
 ]