diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
index 2b2eae4c..742bf0e3 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -56,7 +56,7 @@ jobs:
       # compiles into a root-installed system service.
       - name: Scan bun.lock and Cargo.lock for known-vulnerable / malicious dependencies
         id: scan
-        uses: google/osv-scanner-action/osv-scanner-action@9fd1bcce27f67e3bd819a0a7620e332803dc43bc # v2.3.8
+        uses: google/osv-scanner-action/osv-scanner-action@f4cfcc01edc9c8b756a9b873b7a623ca674da51e # v2.3.8
         with:
           scan-args: |-
             --lockfile=bun.lock