diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 1752ac4..a40fc10 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           fetch-depth: 0 # full history so gitleaks can scan all commits
       - name: gitleaks
-        uses: gitleaks/gitleaks-action@v2
+        uses: gitleaks/gitleaks-action@v3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           # gitleaks-action is free for public/personal repos; an org needs a