diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 67dcc6b..9af0901 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           fetch-depth: 0 # gitleaks scans commit history, not just the checkout
-      - uses: gitleaks/gitleaks-action@v2
+      - uses: gitleaks/gitleaks-action@v3
         env:
           GITHUB_TOKEN: ${{ github.token }} # PR comments / job summary
           # GITLEAKS_LICENSE is only required for ORG-owned repos; this repo is user-owned.