diff --git a/.github/workflows/go-check.yml b/.github/workflows/go-check.yml
index 2ddaee4..d57ee2a 100644
--- a/.github/workflows/go-check.yml
+++ b/.github/workflows/go-check.yml
@@ -463,7 +463,7 @@ jobs:
           bash -euo pipefail -c "$PRE_BUILD_CMD"
 
       - name: Run gosec
-        uses: securego/gosec@1769a22fd149bfd9e5e546e06a7f9d596eab2f65 # master
+        uses: securego/gosec@45b083a0cb42119d61b1e0e364d8c62c68f6f5cd # master
         with:
           # `-no-fail` keeps the CI step green; findings flow into the
           # Security tab via the SARIF upload below. Treat code scanning