diff --git a/.github/workflows/secret-sweep.yml b/.github/workflows/secret-sweep.yml
index b8446b8..fc42128 100644
--- a/.github/workflows/secret-sweep.yml
+++ b/.github/workflows/secret-sweep.yml
@@ -66,7 +66,7 @@ jobs:
           fetch-depth: 0
 
       - name: scan the tree and its history
-        uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # v3.97.1
+        uses: trufflesecurity/trufflehog@31ce31ee1abbcc7dc8eee5764c17121c3044c8b2 # v3.99.7
         with:
           path: ./
           # An empty base scans everything rather than a diff. On a pull