diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 76ff5f7b..dfb49dce 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -109,7 +109,7 @@ jobs:
         run: echo "Dependency audit is included in the SBOM gate above."
 
       - name: Secret scanning (TruffleHog)
-        uses: trufflesecurity/trufflehog@4dd8831c5f12599465d4d45c3c447b4018a34c85 # v3.97.9
+        uses: trufflesecurity/trufflehog@0186870afd2c4a90def791d80260923ba583d076 # v3.98.0
         with:
           path: ./
           base: ${{ github.event.repository.default_branch }}