diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index eb799d4d..930d3756 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -77,7 +77,7 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v2
         
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@6fbd381238e97e1d1f3358f0d6d65de78dcf9245 # master
+        uses: securego/gosec@0ce4453ddd8cca1291d2056cf903b545baad95a0 # master
         with:
           # we let the report trigger content trigger a failure using the GitHub Security features.
           args: '-no-fail -fmt sarif -out results.sarif ./...'