diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml
index 3f2e9d6..7432da4 100644
--- a/.github/workflows/secret-scan.yml
+++ b/.github/workflows/secret-scan.yml
@@ -14,6 +14,6 @@ jobs:
       - uses: actions/checkout@v7
         with:
           fetch-depth: 0  # full history for PR diff scans
-      - uses: gitleaks/gitleaks-action@v2.3.9  # pin the tag
+      - uses: gitleaks/gitleaks-action@v3.0.0  # pin the tag
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}