diff --git a/.github/workflows/secret-sweep.yml b/.github/workflows/secret-sweep.yml
index b8446b8..c6d30ff 100644
--- a/.github/workflows/secret-sweep.yml
+++ b/.github/workflows/secret-sweep.yml
@@ -66,7 +66,7 @@ jobs:
           fetch-depth: 0
 
       - name: scan the tree and its history
-        uses: trufflesecurity/trufflehog@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b # v3.97.1
+        uses: trufflesecurity/trufflehog@e76dff8a7e57d6df0c60ad8cbf5d5cba505a8fc9 # v3.99.2
         with:
           path: ./
           # An empty base scans everything rather than a diff. On a pull