diff --git a/.github/workflows/vortex-test-common.yml b/.github/workflows/vortex-test-common.yml
index d7de1448e..46c406772 100644
--- a/.github/workflows/vortex-test-common.yml
+++ b/.github/workflows/vortex-test-common.yml
@@ -267,7 +267,7 @@ jobs:
         continue-on-error: ${{ vars.VORTEX_CI_ACTIONLINT_IGNORE_FAILURE == '1' }}
 
       - name: Check GitHub Actions security with Zizmor
-        uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
+        uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
         with:
           # Audit only the real workflows. The default '.' also descends into the
           # installer test fixtures, whose normalized '__HASH__' action refs are