diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml
index 65dde0b..5b57be9 100644
--- a/.github/workflows/secret-scan.yml
+++ b/.github/workflows/secret-scan.yml
@@ -51,7 +51,7 @@ jobs:
           persist-credentials: false
 
       - name: Run gitleaks with custom config
-        uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7  # v2.3.9
+        uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e  # v3.0.0
         env:
           # Point the action at our pinned config. No GITLEAKS_LICENSE is set,
           # which is intentional for an OSS repo under the free tier.