diff --git a/.github/workflows/secret-sweep.yml b/.github/workflows/secret-sweep.yml
index b8446b8..3cead68 100644
--- a/.github/workflows/secret-sweep.yml
+++ b/.github/workflows/secret-sweep.yml
@@ -66,7 +66,7 @@ jobs:
           fetch-depth: 0
 
       - name: scan the tree and its history
-        uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # v3.97.1
+        uses: trufflesecurity/trufflehog@363923b901c911a9164f50b6c423f47c15372b1c # v3.97.4
         with:
           path: ./
           # An empty base scans everything rather than a diff. On a pull