diff --git a/.github/workflows/security-nightly.yml b/.github/workflows/security-nightly.yml
index 559a4af..024a00a 100644
--- a/.github/workflows/security-nightly.yml
+++ b/.github/workflows/security-nightly.yml
@@ -29,7 +29,7 @@ jobs:
   scan:
     # Fork guard: never run fork PR code on self-hosted minis
     if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
-    uses: bloxwap/.github/.github/workflows/security-scan.yml@90c5e7f20cef611a83ea7db51f9b85478d714fa6 # v1
+    uses: bloxwap/.github/.github/workflows/security-scan.yml@0387d86d796b5a80509a9862b35991a160ff13b4 # v1.0.1
     permissions:
       contents: read
     with: