diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
index eca2475d..c443c3c5 100644
--- a/.github/workflows/fossa.yml
+++ b/.github/workflows/fossa.yml
@@ -18,7 +18,7 @@ jobs:
       # The FOSSA token is shared between all repos in NeuVector's GH org. It can
       # be used directly and there is no need to request specific access to EIO.
       - name: Read FOSSA token
-        uses: rancher-eio/read-vault-secrets@0da85151ad1f19ed7986c41587e45aac1ace74b6 # v3
+        uses: rancher-eio/read-vault-secrets@dfae8acd43a9e170fca5f90168da22f814fe4e9a # v3
         with:
           secrets: |
             secret/data/github/org/neuvector/fossa/credentials token | FOSSA_API_KEY_PUSH_ONLY