diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 83ce96b..9685df1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -75,7 +75,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           fetch-depth: 0   # gitleaks needs full history to scan all commits
-      - uses: gitleaks/gitleaks-action@v2
+      - uses: gitleaks/gitleaks-action@v3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}