diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index aece80b..c31140f 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -53,7 +53,7 @@ jobs:
           fetch-depth: 0
 
       - name: TruffleHog OSS
-        uses: trufflesecurity/trufflehog@bcfcf73aaf4759d4dadc2783177c245a02792318 # main @ 2026-06-03
+        uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # main @ 2026-06-03
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha }}