diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 5a5e349..86e6647 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -75,7 +75,7 @@ jobs:
       # -no-fail keeps the job green so the SARIF report is always uploaded;
       # findings show up as code scanning alerts instead.
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@v2.28.0
+        uses: securego/gosec@v2.29.0
         with:
           args: "-no-fail -fmt=sarif -out=gosec.sarif ./..."