diff --git a/.github/workflows/analyze-github-actions.yaml b/.github/workflows/analyze-github-actions.yaml
index f5714b1..5687638 100644
--- a/.github/workflows/analyze-github-actions.yaml
+++ b/.github/workflows/analyze-github-actions.yaml
@@ -46,4 +46,4 @@ jobs:
         shell: bash
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+        uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0
diff --git a/.github/workflows/validate-workflows.yaml b/.github/workflows/validate-workflows.yaml
index 012f83a..db3c6a0 100644
--- a/.github/workflows/validate-workflows.yaml
+++ b/.github/workflows/validate-workflows.yaml
@@ -74,6 +74,6 @@ jobs:
       # `run:` block) that CodeQL did not catch. See giantswarm/giantswarm#36940.
       - name: Run zizmor (non-blocking)
         continue-on-error: true
-        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+        uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0
         with:
           persona: regular