diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 0bf9602..d0c5594 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -24,7 +24,7 @@ jobs:
           fetch-depth: 0  # full history required for full-repo scan
 
       - name: Run gitleaks
-        uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7  # v2.3.9
+        uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e  # v3.0.0
         env:
           # GITLEAKS_LICENSE not required for public repositories.
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}