diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 649bfadc2..84c3fc7a2 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -31,7 +31,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Run Semgrep scan
-        uses: open-edge-platform/orch-ci/.github/actions/security/semgrep@8e869384de7ed5f98941c59c2e4ac73eb09862fb  # 2026.1.3
+        uses: open-edge-platform/orch-ci/.github/actions/security/semgrep@af6d3ab68ed04ec1b3111392ec0844e8e1ac83a5  # 2026.1.3
         with:
           scan-scope: all
           severity: "HIGH"