diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 90d7528..7cf4830 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -104,7 +104,7 @@ jobs:
       # --framework as a space-separated list of choices, not a
       # comma-separated string — "cloudformation,terraform" (one token)
       # fails argparse's choices check. Space-separate instead.
-      - uses: bridgecrewio/checkov-action@99bb2caf247dfd9f03cf984373bc6043d4e32ebf # v12.1347.0
+      - uses: bridgecrewio/checkov-action@a8664e3a0549367977f0cda990a34311835c87c0 # v12.3123.0
         with:
           directory: .
           framework: cloudformation terraform