diff --git a/.github/workflows/go-check.yml b/.github/workflows/go-check.yml
index 2a77b40..9216951 100644
--- a/.github/workflows/go-check.yml
+++ b/.github/workflows/go-check.yml
@@ -463,7 +463,7 @@ jobs:
           bash -euo pipefail -c "$PRE_BUILD_CMD"
 
       - name: Run gosec
-        uses: securego/gosec@9e75c0576c9878035d4221392108d458abe10fc3 # master
+        uses: securego/gosec@5bb2909d48fa8072136f38ad329b37575ab15c9f # master
         with:
           # `-no-fail` keeps the CI step green; findings flow into the
           # Security tab via the SARIF upload below. Treat code scanning