diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index b94aae3..cd46488 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -65,7 +65,7 @@ jobs:
           # Full history so gitleaks can scan all commits, not just the HEAD
           fetch-depth: 0
       - name: Run gitleaks
-        uses: gitleaks/gitleaks-action@v2
+        uses: gitleaks/gitleaks-action@v3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           # No GITLEAKS_LICENSE env = free for public repos, rate-limited for private.