diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 73bbbac5..722dc237 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -581,7 +581,7 @@ jobs:
           # not just the tip — leaks often slip in mid-branch and get
           # "fixed" by a follow-up commit.
           fetch-depth: 0
-      - uses: gitleaks/gitleaks-action@v2
+      - uses: gitleaks/gitleaks-action@v3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}