diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml
index 280206c6..31d16f69 100644
--- a/.github/workflows/secret-scan.yml
+++ b/.github/workflows/secret-scan.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run trufflehog
-        uses: trufflesecurity/trufflehog@30d5bb91af1a771378349dbbb0c82129392acf70 # v3.95.6
+        uses: trufflesecurity/trufflehog@363923b901c911a9164f50b6c423f47c15372b1c # v3.97.4
         with:
           path: ./
           extra_args: --results=verified,unknown --exclude-paths=.github/trufflehog-exclude.txt