diff --git a/.github/workflows/go-check.yml b/.github/workflows/go-check.yml
index 9216951..aa5e592 100644
--- a/.github/workflows/go-check.yml
+++ b/.github/workflows/go-check.yml
@@ -463,7 +463,7 @@ jobs:
           bash -euo pipefail -c "$PRE_BUILD_CMD"
 
       - name: Run gosec
-        uses: securego/gosec@5bb2909d48fa8072136f38ad329b37575ab15c9f # master
+        uses: securego/gosec@1769a22fd149bfd9e5e546e06a7f9d596eab2f65 # master
         with:
           # `-no-fail` keeps the CI step green; findings flow into the
           # Security tab via the SARIF upload below. Treat code scanning