diff --git a/.github/workflows/analyze-github-actions.yaml b/.github/workflows/analyze-github-actions.yaml
index 5687638..b66d4a5 100644
--- a/.github/workflows/analyze-github-actions.yaml
+++ b/.github/workflows/analyze-github-actions.yaml
@@ -46,4 +46,4 @@ jobs:
         shell: bash
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0
+        uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
diff --git a/.github/workflows/validate-workflows.yaml b/.github/workflows/validate-workflows.yaml
index db3c6a0..ca3df9a 100644
--- a/.github/workflows/validate-workflows.yaml
+++ b/.github/workflows/validate-workflows.yaml
@@ -74,6 +74,6 @@ jobs:
       # `run:` block) that CodeQL did not catch. See giantswarm/giantswarm#36940.
       - name: Run zizmor (non-blocking)
         continue-on-error: true
-        uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0
+        uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
         with:
           persona: regular