diff --git a/.github/workflows/go-check.yml b/.github/workflows/go-check.yml
index 2e7ee0d..2a77b40 100644
--- a/.github/workflows/go-check.yml
+++ b/.github/workflows/go-check.yml
@@ -463,7 +463,7 @@ jobs:
           bash -euo pipefail -c "$PRE_BUILD_CMD"
 
       - name: Run gosec
-        uses: securego/gosec@849570622f56a251c015c0e2417aebafc0216e17 # master
+        uses: securego/gosec@9e75c0576c9878035d4221392108d458abe10fc3 # master
         with:
           # `-no-fail` keeps the CI step green; findings flow into the
           # Security tab via the SARIF upload below. Treat code scanning