diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml
index 09f3144..7bf6ac8 100644
--- a/.github/workflows/secret-scan.yml
+++ b/.github/workflows/secret-scan.yml
@@ -26,7 +26,7 @@ jobs:
           persist-credentials: false
 
       - name: gitleaks (full history)
-        uses: gitleaks/gitleaks-action@44c470ffc35caa8b1eb3e8012ca53c2f9bea4eb5  # v2.3.9
+        uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e  # v2.3.9
 
       - name: trivy secret scan (ignore-agnostic working tree)
         uses: aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4  # v0.32.0