diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml
index bae397c..2a6f7a5 100644
--- a/.github/workflows/secret-scan.yml
+++ b/.github/workflows/secret-scan.yml
@@ -28,7 +28,7 @@ jobs:
           # needs every commit ever made.
           fetch-depth: 0
 
-      - uses: gitleaks/gitleaks-action@v2
+      - uses: gitleaks/gitleaks-action@v3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           # Findings belong in the job log and the failed check, not in PR comments: