diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index a7eb602..82831ac 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -25,7 +25,7 @@ jobs:
         with:
           fetch-depth: 0   # full history so gitleaks can scan past commits
       - name: Run gitleaks
-        uses: gitleaks/gitleaks-action@v2
+        uses: gitleaks/gitleaks-action@v3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           # GITLEAKS_ENABLE_UPLOAD_ARTIFACT: "true"