diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 38fc524..45d5229 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -86,7 +86,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Secret scan
-        uses: trufflesecurity/trufflehog@main
+        uses: trufflesecurity/trufflehog@v3.88.18
         with:
           extra_args: --only-verified